VYPR
← All advisories
Low severity2.6NVD Advisory· Published Oct 5, 2021· Updated Jun 17, 2026

CVE-2021-39886

CVE-2021-39886

Description

Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing users to read confidential Epic references.

Affected products

5
  • GitLab Inc./GitLabllm-fuzzy4 versions
    >=10.6 <14.1.7+ 3 more
    • (no CPE)range: >=10.6 <14.1.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=10.6.0,<14.1.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=10.6.0,<14.1.7
    • (no CPE)range: >=10.6, <14.1.7
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 10.6.0, < 14.1.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.