CVE-2021-22221
First published: Tue Jun 08 2021(Updated: )
An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 before 13.11.5, all versions starting from 13.12.0 before 13.12.2. Insufficient expired password validation in various operations allow user to maintain limited access after their password expired
Credit: cve@gitlab.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GitLab | >=12.9.0<13.10.5 | |
| GitLab | >=12.9.0<13.10.5 | |
| GitLab | >=13.11.0<13.11.5 | |
| GitLab | >=13.11.0<13.11.5 | |
| GitLab | >=13.12.0<13.12.2 | |
| GitLab | >=13.12.0<13.12.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-22221?
CVE-2021-22221 is classified as a medium severity vulnerability due to the insufficient validation of expired passwords.
How do I fix CVE-2021-22221?
To fix CVE-2021-22221, you should update GitLab to version 13.10.5 or later, 13.11.5 or later, or 13.12.2 or later.
What versions are affected by CVE-2021-22221?
CVE-2021-22221 affects GitLab versions from 12.9.0 before 13.10.5, from 13.11.0 before 13.11.5, and from 13.12.0 before 13.12.2.
Is CVE-2021-22221 present in the GitLab community edition?
Yes, CVE-2021-22221 is present in both the GitLab community and enterprise editions of affected versions.
What type of vulnerability is CVE-2021-22221?
CVE-2021-22221 is a security vulnerability characterized by inadequate validation of expired passwords allowing limited access.
- agent/references
- agent/type
- agent/weakness
- agent/author
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/gitlab
- canonical/gitlab
- version/gitlab/12.9.0
- version/gitlab/13.11.0
- version/gitlab/13.12.0