CVE-2021-39866

A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens...

GitLab 13.6 < 14.1.7 / 14.2 < 14.2.5 / 14.3 < 14.3.1 (CVE-2021-39866)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens. CVE-2021-39866 Note that Nessus has not tested for this issue but ha...

CVE-2021-39866

CVE-2021-39866 describes a business-logic flaw in GitLab’s project deletion flow that grants persistent access via project access tokens for GitLab 13.6 and later. Affected products: GitLab (13.6+). Root cause: incorrect handling in the project deletion process allows token-based persistence. Imp...