CVE-2021-22205 is fixed in gitlab13,I use the latest gitlab14.5 Has this bug been fixed?

qiaofeng1227 · December 21, 2021, 2:36am

CVE-2021-22205 is fixed in gitlab13 , my AWS vm use the latest gitlab14 5. However, the safety test reported the risk(CVE-2021-22205).Excuse me, in gitlab14,this vulnerability has been fixed?

qiaofeng1227 · December 21, 2021, 2:38am

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22205

grove · December 21, 2021, 10:48am

Since that was fixed (in January 2021 as far as I can see) long before GitLab 14 (let alone 14.5) was released, it’s safe to assume the fix is in 14(.5).

qiaofeng1227 · December 22, 2021, 1:07am

@grove thank you very much