Lucene search

K
osvGoogleOSV:CVE-2021-39876
HistoryMar 28, 2022 - 7:15 p.m.

CVE-2021-39876

2022-03-2819:15:07
Google
osv.dev
4

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.6%

In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups.

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.6%