CVE-2021-39937

🗓️ 13 Dec 2021 15:47:51Reported by GitLabType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 53 Views

A collision in access memoization logic in GitLab before 14.5.2 leads to potential elevated privilege

Reporter	Title	Published	Views	Family All 19
ArchLinux	[ASA-202112-10] gitlab: multiple issues	11 Dec 202100:00	–	archlinux
FreeBSD	Gitlab -- Multiple Vulnerabilities	6 Dec 202100:00	–	freebsd
CNNVD	GitLab 权限许可和访问控制问题漏洞	7 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-39937	13 Dec 202115:47	–	cvelist
Debian CVE	CVE-2021-39937	13 Dec 202115:47	–	debiancve
EUVD	EUVD-2021-26293	7 Oct 202500:30	–	euvd
Tenable Nessus	FreeBSD : Gitlab -- Multiple Vulnerabilities (b299417a-5725-11ec-a587-001b217b3468)	13 Dec 202100:00	–	nessus
Tenable Nessus	GitLab 0.0 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39937)	3 Jan 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-39937	18 Aug 202500:00	–	nessus
NCSC	Vulnerabilities fixed in GitLab	7 Dec 202100:00	–	ncsc

NVD

Vulners

Node

gitlab gitlabRange<14.3.6community

gitlab gitlabRange<14.3.6enterprise

gitlab gitlabRange14.4.0–14.4.4community

gitlab gitlabRange14.4.0–14.4.4enterprise

gitlab gitlabRange14.5.0–14.5.2community

gitlab gitlabRange14.5.0–14.5.2enterprise

[
  {
    "product": "GitLab",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": ">=0.0, <14.3.6"
      },
      {
        "status": "affected",
        "version": ">=14.4, <14.4.4"
      },
      {
        "status": "affected",
        "version": ">=14.5, <14.5.2"
      }
    ]
  }
]