CVE-2021-39873

Published: Oct 4, 2021Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

In all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be leveraged by attackers to trick users into visiting a malicious website by spoofing the content in an error response.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 1.0.0 to 14.1.7
Gitlab Gitlab	From 14.2.0 to 14.2.5
Gitlab Gitlab	From 1.0.0 to 14.1.7
Gitlab Gitlab	From 14.2.0 to 14.2.5
Gitlab Gitlab	Version 4.3.0
Gitlab Gitlab	Version 4.3.0