← Database

CVE-2021-39930

MEDIUM CVSS: 4.3 Published: 2021-12-13 Modified: 2026-06-17

Description

Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attacker to access a user's custom project and group templates

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-863

References