← Database

CVE-2021-39888

MEDIUM CVSS: 4.3 Published: 2021-10-05 Modified: 2026-06-17

Description

In all versions of GitLab EE starting from 13.10 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions starting from 14.3 before 14.3.1 a specific API endpoint may reveal details about a private group and other sensitive info inside issue and merge request templates.

Affected Platforms

Gitlab Gitlab

Weakness Type

NVD-CWE-Other

References