Description (CNA)
An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GitLab / GitLab | affected >=13.8.0, <13.8.4; affected >=13.7.0, <13.7.7; affected >=3.0.1, <13.6.7 |
CWE
No CWE identifiers supplied.
References
- https://gitlab.com/gitlab-org/gitlab/-/issues/243491
- https://hackerone.com/reports/962604
- https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22176.json
ADP enrichment
No English description supplied.