GitLab 13.0 < 14.1.7 / 14.2 < 14.2.5 / 14.3 < 14.3.1 (CVE-2021-39871)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker making a crafted API call. CVE-2021-39871 Not...

CVE-2021-39871

creationtimestamp| type| source ---|---|--- 2021-10-04 20:23:26+00:00| seen| https://t.me/cibsecurity/29888...

CVE-2021-39871

In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker making a crafted API call...

UBUNTU-CVE-2021-39871

In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker making a crafted API call...

CVE-2021-39871

The CVE-2021-39871 entry affects GitLab CE/EE (since version 13.0). The vulnerability allows an attacker to bypass the Bitbucket Server import security check by issuing a crafted API call when the setting to disable Bitbucket Server import is enabled. The impact is a bypass of the intended access...