CVE-2021-22239

MEDIUM

GitLab 14.0.0-14.0.7 - Unauthenticated Metadata Injection in Issue Creation

Title source: llm

An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later.

Core 2

Core References

Broken Link x_refsource_misc

Vendor Advisory x_refsource_confirm

CVSS v3 5.0

EPSS 0.0016

EPSS Percentile 37.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

CWE

CWE-863

Status published

Products (1)

gitlab/gitlab 14.0.0 - 14.0.7 (2 CPE variants)

Published Sep 09, 2021

Tracked Since Feb 18, 2026