CVE-2021-22219: GitLab

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

All versions of GitLab CE/EE starting from 9.5 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting from 13.12 before 13.12.2 allow a high privilege user to obtain sensitive information from log files because the sensitive information was not correctly registered for log masking.

Affected products

• GitLab GitLab: from 9.5.0, before 13.10.5 (fixed in 13.10.5); from 13.11.0, before 13.11.5 (fixed in 13.11.5); from 13.12.0, before 13.12.2 (fixed in 13.12.2)

Published 2021-06-08. Last modified 2026-06-17.