CVE-2021-22234

MEDIUM 6.4CVE-2021-22234 · Published 05/08/2021 · updated 17/06/2026

In short

CVE-2021-22234 is a MEDIUM (CVSS 6.4) vulnerability affecting gitlab (gitlab).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gitlab gitlab	`≥ 13.11.0, ≤ 13.11.7≥ 13.12.0, ≤ 13.12.8≥ 14.0.0, ≤ 14.0.4`	No fix yet

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11 before 13.11.7, all versions starting from 13.12 before 13.12.8, and all versions starting from 14.0 before 14.0.4. A specially crafted design image allowed attackers to read arbitrary files on the server.

References

gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22234.json · Vendor Advisory
gitlab.com/gitlab-org/gitlab/-/issues/335205 · Issue Tracking
hackerone.com/reports/1212067 · Exploit

More vulnerabilities in gitlab

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gitlab

≥ 13.11.0, ≤ 13.11.7≥ 13.12.0, ≤ 13.12.8≥ 14.0.0, ≤ 14.0.4

No fix yet

More vulnerabilities in gitlab

See all →