CVE-2021-22198 : Security Advisory and Response

An in-depth look at CVE-2021-22198 affecting GitLab versions 13.8 and above, allowing authenticated users to delete incident metric images of public projects.

Understanding CVE-2021-22198

This CVE impacts GitLab versions 13.8 to 13.10.1, enabling authenticated users to delete incident metric images in public projects.

What is CVE-2021-22198?

An issue in GitLab CE/EE versions 13.8 and above permits authenticated users to remove incident metric images from public projects, posing a security risk.

The Impact of CVE-2021-22198

The vulnerability has a CVSSv3 base score of 4.3 (Medium severity), with low integrity impact and no availability impact, highlighting the importance of prompt mitigation.

Technical Details of CVE-2021-22198

This section delves into the vulnerability's description, affected systems, and exploitation mechanism.

Vulnerability Description

The flaw in GitLab versions 13.8 to 13.10.1 allows authenticated users to delete incident metric images in public projects, potentially leading to data loss or manipulation.

Affected Systems and Versions

GitLab versions >=13.8 and <13.8.7, >=13.9 and <13.9.5, and >=13.10 and <13.10.1 are affected by this vulnerability. Users with these versions are advised to take immediate action.

Exploitation Mechanism

By exploiting this vulnerability, authenticated users can misuse their access to delete incident metric images in public projects, compromising data integrity.

Mitigation and Prevention

Protect your systems by following the necessary security measures and applying patches to address CVE-2021-22198.

Immediate Steps to Take

Users should upgrade GitLab to versions that include the necessary patches to prevent exploitation of this vulnerability. Additionally, limit user privileges to mitigate risks.

Long-Term Security Practices

Enhance security by implementing proper access controls, conducting regular security audits, and providing security awareness training to prevent similar incidents.

Patching and Updates

Stay informed about security updates from GitLab and promptly apply patches to eliminate vulnerabilities and enhance the security posture of your systems.