CVE-2021-22239

CVE-2021-22239 describes an unauthorized metadata insertion vulnerability in GitLab CE/EE versions 14.0 and later, allowing an unauthenticated attacker to manipulate metadata when creating new issues. With a CVSS score of 4.3 (Medium), this low-complexity attack requires no user interaction and results in a low impact on integrity, but no impact on confidentiality or availability. While the vulnerability has a low EPSS score and FAUCET Risk Score, there is no evidence of active exploitation, nor are there publicly available exploit modules like Metasploit or Nuclei, though it has received some community discussion and media coverage.