Security Advisory

CVE-2021-39870

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-10-05 13:41:53

Last updated 2024-08-04 02:20:33

Assigner GitLab

CVSS score 4.3

State PUBLISHED

Description

In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by an attacker making a crafted API call.

← Browse all CVEs View on cve.org ↗