CVE-2021-39930: Medium severity gitlab vulnerability
Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attacker to access a user's custom project and group templates
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-39930?
CVE-2021-39930 has been classified as a high severity vulnerability due to the potential exposure of sensitive user project and group templates.
How do I fix CVE-2021-39930?
To fix CVE-2021-39930, upgrade GitLab to a version later than 14.3.6, 14.4.4, or 14.5.2 depending on your current version.
What versions are affected by CVE-2021-39930?
CVE-2021-39930 affects GitLab EE versions from 12.4 to 14.3.6, 14.4.0 to 14.4.4, and 14.5.0 to 14.5.2.
What type of vulnerability is CVE-2021-39930?
CVE-2021-39930 is a missing authorization vulnerability that allows unauthorized access to user templates.
Who is impacted by CVE-2021-39930?
All users of affected versions of GitLab, especially those utilizing custom project and group templates, are impacted by CVE-2021-39930.