CVE-2021-22249

MEDIUM 4.3CVE-2021-22249 · Published 23/08/2021 · updated 17/06/2026

In short

CVE-2021-22249 is a MEDIUM (CVSS 4.3) vulnerability affecting gitlab (gitlab).
Chance of exploitation in the next 30 days (EPSS): 0.97%, higher than 62.2% of all vulnerabilities.
Fix: update to 13.12.9, 14.0.7, 14.1.2 or later.

Package	Affected versions	Patched versions
gitlab gitlab	`≥ 12.2.0, < 13.12.9≥ 14.0.0, < 14.0.7≥ 14.1.0, < 14.1.2`	`13.12.914.0.714.1.2`

A verbose error message in GitLab EE affecting all versions since 12.2 could disclose the private email address of a user invited to a group

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 12.2.0, < 13.12.9≥ 14.0.0, < 14.0.7≥ 14.1.0, < 14.1.2

13.12.914.0.714.1.2

More vulnerabilities in gitlab

See all →