VDB
CVE-2021-22221
CVE-2021-22221
PUBLISHED
CVSS 6.5 MEDIUM
An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 before 13.11.5, all versions starting from 13.12.0 before 13.12.2. Insufficient expired password validation in various operations allow user to maintain limited access after their password expired
EPSS 0.82% · 55.8th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS Score
0.82%
55.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 12.9.0, 13.12.0, 13.11.0 |
| Bitnami | gitlab | 12.9.0, 13.11.0, 13.12.0 |
Timeline
- Jun 8, 2021 CVE Published
- Jun 9, 2021 EPSS Score
- Aug 10, 2021 EPSS Score
- Oct 11, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 11, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Apr 13, 2022 EPSS Score
- Jun 14, 2022 EPSS Score
- Oct 16, 2022 EPSS Score
- Dec 16, 2022 EPSS Score