NetSight
IP …
medium4.3

CVE-2021-39870

In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by an attacker making a…

Impact

In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by an attacker making a crafted API call.

Affected products

VendorProductAffected versions
GitlabGitlab
from 11.11.0 before 14.1.7
from 14.2.0 before 14.2.5
from 14.3.0 before 14.3.1

References