CVE-2021-39872

creationtimestamp| type| source ---|---|--- 2021-10-05 16:30:27+00:00| seen| https://t.me/cibsecurity/29958...

CVE-2021-39872

In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still access GitLab through git and API through access tokens acquired before password expiration...

CVE-2021-39872

CVE-2021-39872 affects GitLab CE/EE (all versions since 14.1) and stems from an improper access-control flaw that allows users with expired passwords to access GitLab via git and API tokens that were acquired before expiration. The vulnerability is described as enabling access through existing to...