CVE-2021-39941 log

Source
Severity Low
Remote Yes
Type Information disclosure
Description
An information disclosure vulnerability in GitLab before version 14.5.2 allowed non-project members to see the default branch name for projects that restrict access to the repository to project members.
Group Package Affected Fixed Severity Status Ticket
AVG-2603 gitlab 14.5.0-1 14.5.2-1 High Fixed
Date Advisory Group Package Severity Type
11 Dec 2021 ASA-202112-10 AVG-2603 gitlab High multiple issues
References
https://about.gitlab.com/releases/2021/12/06/security-release-gitlab-14-5-2-released/