CVE-2021-39884

In all versions of GitLab EE since version 8.13, an endpoint discloses names of private groups that have access to a project to low privileged users that are part of that project...

CVE-2021-39884

creationtimestamp| type| source ---|---|--- 2021-10-05 16:30:41+00:00| seen| https://t.me/cibsecurity/29970...

CVE-2021-39884

CVE-2021-39884 affects GitLab Enterprise Edition (EE) back to 8.13; an endpoint reveals the names of private groups that have access to a project to low-privilege users embedded in that project. The root cause and exact vulnerable component are not expanded beyond “an endpoint discloses group nam...