vulnerability

FreeBSD: VID-b299417a-5725-11ec-a587-001b217b3468 (CVE-2021-39934): Gitlab -- Multiple Vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:N/A:N)

Published

Dec 7, 2021

Added

Nov 4, 2022

Modified

Jun 15, 2026

Description

Improper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions starting 12.10 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2.

Solution

freebsd-upgrade-package-gitlab-ce

References

CVE-2021-39934
https://attackerkb.com/topics/CVE-2021-39934
CWE-639
EUVD-EUVD-2021-26290
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26290

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report