Home Tools CVE CVE-2021-22170
HIGH

CVE-2021-22170

Gitlab GitLab 2021-12-06 CVSS v3.1
CVSS
7.5

Description

Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted content

Weakness (CWE)

CWE-327

EPSS Score

0.54%
Probability of exploitation in next 30 days
44.1th percentile

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22170.json Exploit, Third Party Advisory https://gitlab.com/gitlab-org/gitlab/-/issues/36855 Exploit, Issue Tracking, Third Party Advisory
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE