CVE-2021-22186
An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners
Date published : 2021-03-24
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22186.json