NetSight
medium6.5

CVE-2021-22221

An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 before 13.11.5, all versi…

Impact

An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 before 13.11.5, all versions starting from 13.12.0 before 13.12.2. Insufficient expired password validation in various operations allow user to maintain limited access after their password expired

Affected products

VendorProductAffected versions
GitlabGitlab
from 12.9.0 before 13.10.5
from 13.11.0 before 13.11.5
from 13.12.0 before 13.12.2

Weakness classification

References