← Database

CVE-2021-39913

MEDIUM CVSS: 4.4 Published: 2021-11-05 Modified: 2026-06-17

Description

Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows an attacker with local file system access to obtain system root-level privileges

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-532

References