CVE-2021-22221: Medium severity gitlab vulnerability
An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 before 13.11.5, all versions starting from 13.12.0 before 13.12.2. Insufficient expired password validation in various operations allow user to maintain limited access after their password expired
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-22221?
CVE-2021-22221 is classified as a medium severity vulnerability due to the insufficient validation of expired passwords.
How do I fix CVE-2021-22221?
To fix CVE-2021-22221, you should update GitLab to version 13.10.5 or later, 13.11.5 or later, or 13.12.2 or later.
What versions are affected by CVE-2021-22221?
CVE-2021-22221 affects GitLab versions from 12.9.0 before 13.10.5, from 13.11.0 before 13.11.5, and from 13.12.0 before 13.12.2.
Is CVE-2021-22221 present in the GitLab community edition?
Yes, CVE-2021-22221 is present in both the GitLab community and enterprise editions of affected versions.
What type of vulnerability is CVE-2021-22221?
CVE-2021-22221 is a security vulnerability characterized by inadequate validation of expired passwords allowing limited access.