In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from...
5.3CVSS6AI score0.01245EPSS
SaveExploits0References2
OSV•added 2021/10/05 1:15 p.m.•15 views
CVE-2021-39869
In all versions of GitLab CE/EE since version 8.9, project exports may expose trigger tokens configured on that project...
