CVE-2021-39918: Medium severity gitlab vulnerability
Incorrect Authorization in GitLab EE affecting all versions starting from 11.1 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows a user to add comments to a vulnerability which cannot be accessed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-39918?
CVE-2021-39918 has been classified as a medium severity vulnerability due to incorrect authorization.
How do I fix CVE-2021-39918?
To fix CVE-2021-39918, upgrade GitLab to version 14.3.6 or later, 14.4.4 or later, or 14.5.2 or later.
What versions are affected by CVE-2021-39918?
CVE-2021-39918 affects all GitLab versions from 11.1 up to 14.3.6, 14.4 up to 14.4.4, and 14.5 up to 14.5.2.
What is the impact of CVE-2021-39918?
CVE-2021-39918 allows unauthorized users to add comments to vulnerabilities that they otherwise cannot access.
Is CVE-2021-39918 related to GitLab EE?
Yes, CVE-2021-39918 specifically affects both the GitLab Community Edition and the Enterprise Edition.