CVE-2021-22172

Publication date

2021-03-26 19:06:48

Family

GitLab

State

PUBLISHED

Description

Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccessible on the releases page