← Database

CVE-2021-39937

MEDIUM CVSS: 5.9 Published: 2021-12-13 Modified: 2026-06-17

Description

A collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, leads to potential elevated privileges in groups and projects under rare circumstances

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-269

References