GitLab 12.9.0 < 13.10.5 / 13.11.0 < 13.11.5 / 13.12.0 < 13.12.2 (CVE-2021-22221)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 before 13.11.5, all versions starting from 13.12.0 before 13.12.2...

[ASA-202106-21] gitlab: multiple issues

Arch Linux Security Advisory ASA-202106-21 ========================================== Severity: High Date : 2021-06-09 CVE-ID : CVE-2021-22181 CVE-2021-22213 CVE-2021-22214 CVE-2021-22216 CVE-2021-22217 CVE-2021-22218 CVE-2021-22219 CVE-2021-22220 CVE-2021-22221 Package : gitlab Type : multiple...

CVE-2021-22221

CVE-2021-22221 – GitLab authentication bypass via expired password validation : Affects GitLab CE/EE versions 12.9.0–13.10.4, 13.11.0–13.11.4, and 13.12.0–13.12.1 (vulnerable until patched). Root cause: insufficient validation of expired passwords in various operations, allowing a user to retain ...