CVE-2021-39916

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-39916
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-39916.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-39916
Aliases
Related
Published
2021-12-13T16:15:08Z
Modified
2025-04-01T22:35:59Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Lack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the configuration of any External Status Check in GitLab EE starting from 14.1 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events