CVE-2021-39870

MEDIUM · CVSS 4.3 EPSS 0.96%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-10-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-39870

Severity

MEDIUM

CVSS

4.3

EPSS

0.96%

GitLab

Original NVD Description

In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by an attacker making a crafted API call.