CVE-2021-39879: GitLab

Low severity, CVSS 3.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's session to disable two-factor authentication

Affected products

• GitLab GitLab: from 7.11.0, before 14.1.7 (fixed in 14.1.7)

Published 2021-10-04. Last modified 2026-06-17.