Lucene search
China National Vulnerability DatabaseCNVD-2021-91179HistoryNov 01, 2021 - 12:00 a.m.
GitLab Information Disclosure Vulnerability (CNVD-2021-91179)
2021-11-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
0.001 Low
EPSS
Percentile
40.4%
GitLab is a self-hosted Git (version control system) project repository application developed in Ruby on Rails by GitLab, Inc. GitLab CE/EE is vulnerable to an information disclosure vulnerability that stems from the fact that project exports can reveal external webhook token values, which can be exploited to access projects exported from it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab gitlab ce/ee | ge | 10.6 |
Related
cve
cve
CVE-2021-39898
2021-11-05 00:15:10
cvelist
cvelist
CVE-2021-39898
2021-11-04 23:21:32
nvd
nvd
CVE-2021-39898
2021-11-05 00:15:10
debiancve
debiancve
CVE-2021-39898
2021-11-05 00:15:10
prion
prion
Code injection
2021-11-05 00:15:00
osv
osv
CVE-2021-39898
2021-11-05 00:15:10
BIT-gitlab-2021-39898
2024-03-06 11:18:11
veracode
veracode
Improper Access Control
2023-08-06 19:57:47
nessus
nessus
GitLab 10.6 < 14.1.7 / 14.2 < 14.2.5 / 14.3 < 14.3.1 (CVE-2021-39898)
2024-01-03 00:00:00
freebsd
freebsd
Gitlab -- Multiple Vulnerabilities
2021-10-28 00:00:00