Lucene search

K
osvGoogleOSV:CVE-2021-39897
HistoryNov 05, 2021 - 12:15 a.m.

CVE-2021-39897

2021-11-0500:15:00
Google
osv.dev
5
gitlab
access control
subgroup members
project
parent group
software

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

39.5%

Improper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with inherited access to a project from a parent group to still have access even after the subgroup is transferred

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

39.5%