Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-39893 EUVD-2021-26249GHSA-mvf7-889j-9c49

A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation.

Published Oct 5, 2021 · Updated Aug 4, 2024 · Assigned by GitLab

Vendor: GitLab Product: GitLab Package: gitlab Category: Web / CMS Ecosystem: Ubuntu

Description

A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation.

Affected products

VendorProductAffectedFixed
GitLab GitLab >=9.1, <14.1.7, >=14.2, <14.2.5, >=14.3, <14.3.1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS gitlab No fix yet —

References