Missing authorization in GitLab EE versions between 12.4... · CVE-2021-39930 · GitHub Advisory Database · GitHub

Missing authorization in GitLab EE versions between 12.4...

Moderate severity Unreviewed Published Dec 14, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attacker to access a user's custom project and group templates

References

Published by the National Vulnerability Database

Dec 13, 2021

Published to the GitHub Advisory Database Dec 14, 2021

Last updated Feb 1, 2023