VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 5, 2021· Updated Aug 4, 2024

CVE-2021-39886

CVE-2021-39886

Description

Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing users to read confidential Epic references.

Affected products

3
  • GitLab Inc./GitLabllm-fuzzy2 versions
    >=10.6, <=14.1.7+ 1 more
    • (no CPE)range: >=10.6, <=14.1.7
    • (no CPE)range: >=10.6, <14.1.7
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 10.6.0, < 14.1.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.