GitLab 13.9 < 14.2.6 / 14.3 < 14.3.4 / 14.4 < 14.4.1 (CVE-2021-39911)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 expos...

CVE-2021-39911

An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 exposes private email address of Issue and Merge Requests assignee to Webhook data consumers...

CVE-2021-39911

GitLab CVE-2021-39911 affects GitLab CE/EE: improper access control exposes the assignee's private email in Issue/MR data via Webhook consumers. Affected versions: 13.9–14.2.5, 14.3.0–14.3.3, and 14.4.0 only. Fixed in GitLab: 14.2.6, 14.3.4, and 14.4.1. Mitigation: upgrade to the fixed releases; ...