Lucene search

K
osvGoogleOSV:CVE-2021-39919
HistoryDec 13, 2021 - 4:15 p.m.

CVE-2021-39919

2021-12-1316:15:09
Google
osv.dev
4

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%

In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, the reset password token and new user email token are accidentally logged which may lead to information disclosure.

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%