Vulnerability Database

308,681

Total vulnerabilities in the database

CVE-2021-22218

All versions of GitLab CE/EE starting from 12.8 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting from 13.12 before 13.12.2 were affected by an issue in the handling of x509 certificates that could be used to spoof author of signed commits.

  • Published: Jun 8, 2021
  • Updated: Nov 16, 2025
  • CVE: CVE-2021-22218
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 2.6
  • AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
gitlab / gitlab 13.12.0 13.12.2
gitlab / gitlab 13.11.0 13.11.5
gitlab / gitlab 12.8.0 13.10.5