← All credits

Thanks to a customer for reporting this vulnerability to the GitLab team

1 vulnerability record and advisories credit this contributor.

CVE-2021-22186
An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners