Linux Distros Unpatched Vulnerability : CVE-2021-39875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of any public group or public project by visiting an API endpoint...

GitLab 13.6 < 14.1.7 / 14.2 < 14.2.5 / 14.3 < 14.3.1 (CVE-2021-39875)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - In all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of any public group or public project by visiting an API endpoint. CVE-2021-39875 Note that Nessus has not...

CVE-2021-39875

creationtimestamp| type| source ---|---|--- 2021-10-05 16:30:26+00:00| seen| https://t.me/cibsecurity/29957...

CVE-2021-39875

In all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of any public group or public project by visiting an API endpoint...

CVE-2021-39875

GitLab CVE-2021-39875 affects GitLab CE/EE from version 13.6 onward, where an API endpoint allows viewing pending invitations for any public group or public project. The root cause is an insecure API exposure that leaks invitation visibility to unauthenticated users. Impact is disclosure of pendi...