CVEvulnerability
CVE-2021-22221
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-06-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-613
Description
An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 before 13.11.5, all versions starting from 13.12.0 before 13.12.2. Insufficient expired password validation in various operations allow user to maintain limited access after their password expired
Affected configurations
• gitlab gitlab (>= 12.9.0 < 13.10.5)
• gitlab gitlab (>= 13.11.0 < 13.11.5)
• gitlab gitlab (>= 13.12.0 < 13.12.2)
Related
Weakness · not in database (1)
References
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22221.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/292006 Broken Link
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22221.json Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/issues/292006 Broken Link