VYPR
← All advisories
Medium severity4.4NVD Advisory· Published Jun 8, 2021· Updated Jun 17, 2026

CVE-2021-22219

CVE-2021-22219

Description

All versions of GitLab CE/EE starting from 9.5 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting from 13.12 before 13.12.2 allow a high privilege user to obtain sensitive information from log files because the sensitive information was not correctly registered for log masking.

Affected products

5
  • GitLab Inc./GitLabv53 versions
    >=9.5, <13.10.5+ 2 more
    • (no CPE)range: >=9.5, <13.10.5
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=9.5.0,<13.10.5
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=9.5.0,<13.10.5
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 9.5.0, < 13.10.5
  • GitLab Inc./GitLab EE and CEllm-fuzzy
    Range: <13.10.5, <13.11.5, <13.12.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.