Gitlab · Gitlab · CVE-2021-22172
Name of the Vulnerable Software and Affected Versions:
GitLab versions 12.8 and later
Description:
The issue concerns improper authorization, allowing a guest user in a private project to view tag data that should be inaccessible on the releases page. This affects the confidentiality of project data.
Recommendations:
For GitLab versions 12.8 and later, at the moment, there is no information about a newer version that contains a fix for this vulnerability.