CVE-2021-39896

—

CVSS 3.1

3.8 low

EPSS

<1%p48

Published

Oct 4, 2021 (Oct 4, 2021)

Modified

Jun 17, 2026

Description

In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the second user they impersonated, which may lead to repudiation issues.

Vendors: gitlab
Products: gitlab
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.