CVE-2021-39869

Published: 5 October 2021

In all versions of GitLab CE/EE since version 8.9, project exports may expose trigger tokens configured on that project.

Priority

CVSS 3 base score: 6.5

Status

Package	Release	Status
gitlab Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	hirsute	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (out of standard support)

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.