GitLab 11.0 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39944)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. A...

CVE-2021-39944

CVE-2021-39944 affects GitLab CE/EE: multiple branches of affected versions, specifically 11.0–14.3.5, 14.4.0–14.4.3, and 14.5.0–14.5.1. The root cause is a permissions validation flaw that lets group members with a developer role elevate to maintainer on imported projects. Practical impact: priv...