PT-2021-22755
CVE-2021-39909
·
تاريخ النشر
2021-11-04
·
تاريخ التحديث
2024-03-06
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
GitLab EE versions 11.3 through 14.2.6
GitLab EE versions 14.3 through 14.3.4
GitLab EE versions 14.4 through 14.4.1
Description
The issue is related to a lack of email address ownership verification in the CODEOWNERS feature. This allows an attacker to bypass the CODEOWNERS Merge Request approval requirement under rare circumstances.
Recommendations
For versions 11.3 through 14.2.6, update to version 14.2.6 or later.
For versions 14.3 through 14.3.4, update to version 14.3.4 or later.
For versions 14.4 through 14.4.1, update to version 14.4.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾