CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects GitLab.
CVE
CVE-2021-39883
Severity
MEDIUM
CVSS
4.3
EPSS
0.77%
GitLab
Original NVD Description
Improper authorization checks in all versions of GitLab EE starting from 13.11 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions starting from 14.3 before 14.3.1 allows subgroup members to see epics from all parent subgroups.
Related CVEs
Other vulnerabilities affecting the same vendor(s)