Lucene search

K
osvGoogleOSV:CVE-2021-39891
HistoryOct 05, 2021 - 2:15 p.m.

CVE-2021-39891

2021-10-0514:15:08
Google
osv.dev
2

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.8%

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin’s impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure.

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.8%