CVE-2021-39886

Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing…

Low · published October 5, 2021

CVSS v3.1
2.6
EPSS
1%
Percentile
46.1
In the wild
Unconfirmed
What it is

Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing users to read confidential Epic references.

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00563 · 46.1th percentile
Published
2021-10-05T13:39Z
EPSS history
Timeline
  • 05 OCT 13:39Z
    Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing…
    cvelistv5