CVE-2021-39882
05.10.2021, 13:15
In all versions of GitLab CE/EE, provided a user ID, anonymous users can use a few endpoints to retrieve information about any GitLab user.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 1.0.0 ≤ 𝑥 < 14.1.7 |
| gitlab | gitlab | 1.0.0 ≤ 𝑥 < 14.1.7 |
| gitlab | gitlab | 14.2 ≤ 𝑥 < 14.2.5 |
| gitlab | gitlab | 14.2 ≤ 𝑥 < 14.2.5 |
| gitlab | gitlab | 4.3.0 |
| gitlab | gitlab | 4.3.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration