GitLab 10.8 < 14.1.7 / 14.2 < 14.2.5 / 14.3 < 14.3.1 (CVE-2021-39900)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary availability via Rails logs. CVE-2021-39900 Note...

CVE-2021-39900

Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary availability via Rails logs...

CVE-2021-39900

Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary availability via Rails logs...

CVE-2021-39900

CVE-2021-39900 corresponds to an information-disclosure vulnerability in GitLab (via SendEntry) that allows exposure of the full URLs of artifacts stored in object-storage through Rails logs starting with GitLab 10.8. The linked documents confirm the root cause as this Rails logging exposure, wit...

CVE-2021-39900

Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary availability via Rails logs...