Lucene search

K

CVE-2021-39945

🗓️ 13 Dec 2021 16:09:15Reported by GitLabType 
cve
 cve
🔗 web.nvd.nist.gov👁 36 Views

Improper access control in GitLab CE/EE API, versions 9.4-14.5.2, allows unauthorized MR approva

Show more
Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
Prion
Improper access control
13 Dec 202116:15
prion
Tenable Nessus
GitLab 9.4 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39945)
2 Jan 202400:00
nessus
Tenable Nessus
FreeBSD : Gitlab -- Multiple Vulnerabilities (b299417a-5725-11ec-a587-001b217b3468)
13 Dec 202100:00
nessus
OSV
BIT-gitlab-2021-39945
6 Mar 202411:17
osv
OSV
CVE-2021-39945
13 Dec 202116:15
osv
CNVD
GitLab Access Control Error Vulnerability (CNVD-2021-99768)
10 Dec 202100:00
cnvd
NVD
CVE-2021-39945
13 Dec 202116:15
nvd
Veracode
Improper Access Control
6 Aug 202320:10
veracode
Cvelist
CVE-2021-39945
13 Dec 202115:47
cvelist
UbuntuCve
CVE-2021-39945
13 Dec 202100:00
ubuntucve
Rows per page
Nvd
Vulners
Node
gitlabgitlabRange9.4.014.3.6community
OR
gitlabgitlabRange9.4.014.3.6enterprise
OR
gitlabgitlabRange14.4.014.4.4community
OR
gitlabgitlabRange14.4.014.4.4enterprise
OR
gitlabgitlabRange14.5.014.5.2community
OR
gitlabgitlabRange14.5.014.5.2enterprise
[
  {
    "product": "GitLab",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": ">=14.5, <14.5.2"
      },
      {
        "status": "affected",
        "version": ">=14.4, <14.4.4"
      },
      {
        "status": "affected",
        "version": ">=9.4, <14.3.6"
      }
    ]
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
13 Dec 2021 16:15Current
3.7Low risk
Vulners AI Score3.7
CVSS24.0
CVSS32.7
EPSS0.001
36
.json
Report