CVE-2021-39936

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 10.7 through 14.3.5 GitLab CE/EE versions 14.4 through 14.4.3 GitLab CE/EE versions 14.5 through 14.5.1

Description The issue is related to improper access control in GitLab CE/EE, allowing an attacker with a deploy token to access a project's disabled wiki.

Recommendations For versions 10.7 through 14.3.5, update to version 14.3.6 or later. For versions 14.4 through 14.4.3, update to version 14.4.4 or later. For versions 14.5 through 14.5.1, update to version 14.5.2 or later.