CVE-2021-39898
In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project whic...
Original description
The description as published by the source.
In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"10.6.0"},{"fixed":"14.1.7"},{"introduced":"14.2.0"},{"fixed":"14.2.5"},{"introduced":"14.3.0"},{"fixed":"14.3.1"}]}]
References
- advisory gitlab.com
- report gitlab.com
- report hackerone.com
- web nvd.nist.gov