CVE-2021-39866

Published: 5 October 2021

A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens.

Priority

CVSS 3 base score: 5.4

Status

Package	Release	Status
gitlab Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (out of standard support)

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.