CVE-2021-22215: GitLab

Low severity, CVSS 2.7. EPSS: 0.8% chance of exploitation in the next 30 days.

An information disclosure vulnerability in GitLab EE versions 13.11 and later allowed a project owner to leak information about the members' on-call rotations in other projects

Affected products

• GitLab GitLab: from 13.11.0, before 13.11.5 (fixed in 13.11.5); from 13.12.0, before 13.12.2 (fixed in 13.12.2)

Published 2021-06-08. Last modified 2026-06-17.