NetSight
IP …
low3.7

CVE-2021-39898

In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was …

Impact

In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was exported from.

Affected products

VendorProductAffected versions
GitlabGitlab
from 10.6.0 before 14.1.7
from 14.2.0 before 14.2.5
Version 14.3.0

Weakness classification

CWE-200

References