Lucene search

K
osvGoogleOSV:CVE-2021-39872
HistoryOct 05, 2021 - 1:15 p.m.

CVE-2021-39872

2021-10-0513:15:00
Google
osv.dev
2

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.9%

In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still access GitLab through git and API through access tokens acquired before password expiration.

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.9%