Gitlab · Gitlab Ce/Ee · CVE-2021-39934
**Name of the Vulnerable Software and Affected Versions**
GitLab CE/EE versions 12.10 through 14.3.5
GitLab CE/EE versions 14.4 through 14.4.3
GitLab CE/EE versions 14.5 through 14.5.1
**Description**
The issue is related to improper access control, allowing any project member to retrieve the service desk email address.
**Recommendations**
For GitLab CE/EE versions 12.10 through 14.3.5, update to version 14.3.6 or later.
For GitLab CE/EE versions 14.4 through 14.4.3, update to version 14.4.4 or later.
For GitLab CE/EE versions 14.5 through 14.5.1, update to version 14.5.2 or later.