CVE-2021-22176

An issue has been discovered in GitLab affecting all versions starting with 3.0.1

Medium · published March 24, 2021

CVSS v3.1
4.3
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01001 · 62.5th percentile
Published
2021-03-24T16:46Z
EPSS history
Timeline
  • 24 MAR 16:46Z
    An issue has been discovered in GitLab affecting all versions starting with 3.0.1
    cvelistv5