CVE-2021-22184: GitLab

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive information that wasn't properly redacted.

Affected products

• GitLab GitLab: from 12.8.0, before 13.6.6 (fixed in 13.6.6); from 13.7.0, before 13.7.6 (fixed in 13.7.6); from 13.8.0, before 13.8.2 (fixed in 13.8.2)

Published 2021-03-26. Last modified 2026-06-17.