CVEvulnerability

CVE-2021-39901

2.7 LOW Published 2021-11-05 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2021-11-05
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected]): 2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected]): 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N

Description

In all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token of that group by visiting a specific endpoint.

• gitlab gitlab (>= 11.10.0 < 14.2.6) • gitlab gitlab (>= 14.3.0 < 14.3.4) • gitlab gitlab 14.4.0