GitLab 4.3.0 Community Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:gitlab:gitlab:4.3.0:*:*:*:community:*:*:*
part: a version: 4.3.0 update: *
| Vendor | Gitlab (57573e99-56e6-5fad-895e-0ce7fffc5b90) |
|---|---|
| Product | Gitlab (5414fcda-a172-5f72-b6e4-b415a19d21eb) |
| Edition | * |
| Language | * |
| Software edition | community |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitlab/gitlab-org/gitlab |
purl2cpe | 2026-06-01 10:14:46.446793 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-39882 |
vulnerable | 2026-06-08 05:33:50.496109 |
Details available
MEDIUM (5.3)
In all versions of GitLab CE/EE, provided a user ID, anonymous users can use a few endpoints to retrieve information about any GitLab user.
Published: 2021-10-05T12:22:05.000Z
Updated: 2024-08-04T02:20:33.633Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39875 |
vulnerable | 2026-06-08 05:33:50.492618 |
Details available
MEDIUM (5.3)
In all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of any public group or public project by visiting an API endpoint.
Published: 2021-10-05T12:28:28.000Z
Updated: 2024-08-04T02:20:33.568Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39873 |
vulnerable | 2026-06-08 05:33:50.491715 |
Details available
MEDIUM (4.3)
In all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be leveraged by attackers to trick users into visiting a malicious website by spoofing the content in an error response.
Published: 2021-10-04T16:43:24.000Z
Updated: 2024-08-04T02:20:33.651Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39872 |
vulnerable | 2026-06-08 05:33:50.491162 |
Details available
MEDIUM (6.5)
In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still access GitLab through git and API through access tokens acquired before password expiration.
Published: 2021-10-05T12:34:28.000Z
Updated: 2024-08-04T02:20:33.624Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39871 |
vulnerable | 2026-06-08 05:33:50.490463 |
Details available
MEDIUM (4.3)
In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker making a crafted API call.
Published: 2021-10-04T16:48:11.000Z
Updated: 2024-08-04T02:20:33.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39869 |
vulnerable | 2026-06-08 05:33:50.489462 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39868 |
vulnerable | 2026-06-08 05:33:50.488903 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39867 |
vulnerable | 2026-06-08 05:33:50.488437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39866 |
vulnerable | 2026-06-08 05:33:50.486988 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.