CVE-2021-39897

Improper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with inherited access to a project from a parent group to still have…

Low · published November 4, 2021

CVSS v3.1
2.6
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

Improper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with inherited access to a project from a parent group to still have access even after the subgroup is transferred

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01199 · 67.9th percentile
Published
2021-11-04T23:07Z
EPSS history
Timeline
  • 04 NOV 23:07Z
    Improper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with inherited access to a project from a parent group to still have…
    cvelistv5