Linux Distros Unpatched Vulnerability : CVE-2021-39882

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of GitLab CE/EE, provided a user ID, anonymous users can use a few endpoints to retrieve information about any GitLab user. CVE-2021-39882 Note...

CVE-2021-39882

creationtimestamp| type| source ---|---|--- 2021-10-05 16:30:34+00:00| seen| https://t.me/cibsecurity/29964...

CVE-2021-39882

Removed by vendor...

CVE-2021-39882

CVE-2021-39882 affects all versions of GitLab CE/EE, enabling anonymous users to access endpoints that disclose information about any GitLab user. The root cause is an information-disclosure flaw where providing a user ID allows exposure of user data via multiple endpoints. The available document...