CVE-2021-22184: 
GitLab vulnerability analysis and mitigation

An information disclosure vulnerability (CVE-2021-22184) was discovered in GitLab versions 12.8 and later. The vulnerability allowed users with access to server logs to view sensitive information that wasn't properly redacted. This issue was internally discovered by the GitLab team and was addressed in versions 13.8.2, 13.7.6, and 13.6.6 (GitLab Release).

The vulnerability is classified as a medium severity issue with a CVSS v3.1 Base Score of 5.5 (MEDIUM) according to NVD, and 6.2 (MEDIUM) according to GitLab Inc. The CVSS vector string is CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating local access is required, low attack complexity, no privileges required, and high confidentiality impact. The vulnerability is categorized under CWE-532 (Insertion of Sensitive Information into Log File) (NVD).

The vulnerability could lead to the exposure of sensitive information through server logs. Users with access to the server logs could view sensitive data that should have been redacted, potentially compromising confidential information (GitLab Release).

GitLab has addressed this vulnerability in versions 13.8.2, 13.7.6, and 13.6.6. It is strongly recommended that all affected installations be upgraded to the latest version immediately. The fix was released as part of GitLab's security release cycle (GitLab Release).