Vulnerabilities
VEX
CWE
KEV Catalogs
All catalogs
CIRCL
CISA
ENISA
Shadowserver
Previdian
Community
Sightings
Comments
Bundles
Organizations
Contributors
Disclosure
Vulnerability Disclosures
Statistics
Log in
About
Search term
Success
GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference -
Registration
← All credits
Thanks @cradlr for reporting this vulnerability through our HackerOne bug bounty program
1 vulnerability record and advisories credit this contributor.
CVE-2021-39902
Incorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a project to modify the severity of an incident.