VULNERABILITY INTELLIGENCE

CVE-2021-39886

CVSS score2.6 LOW
EPSS probability0.56%
CISA KEVNot currently listed
Published2021-10-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing users to read confidential Epic references.

Weakness classification

  • nvd@nist.gov: CWE-276

Primary references