CVE-2021-22226 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Medium
Remote	Yes
Type	Access restriction bypass
Description	Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in GitLab CE/EE since version 13.9 and before version 14.0.2.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-2125	gitlab	14.0.1-1	14.0.3-1	High	Fixed

Date	Advisory	Group	Package	Severity	Type
06 Jul 2021	ASA-202107-18	AVG-2125	gitlab	High	multiple issues

References
https://gitlab.com/gitlab-org/gitlab/-/issues/326684 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22226.json