Lucene search

K
osvGoogleOSV:CVE-2021-39889
HistoryOct 05, 2021 - 2:15 p.m.

CVE-2021-39889

2021-10-0514:15:07
Google
osv.dev
1

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%

In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint may reveal the protected branch name to a malicious user who makes a crafted API call with the ID of the protected branch.

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%