CVE-2021-39945
CVE-2021-39945
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an author of a Merge Request to approve the Merge Request even after having their project access revoked
CVSS 2.7 · Faible · EPSS 0,9%
- Publication
- Mise à jour
Pile logicielle: system