Related Vulnerabilities: CVE-2021-39911  

An improper access control flaw in GitLab CE/EE since version 13.9 exposes private email address of Issue and Merge Requests assignee to Webhook data consumers.

Severity Low

Remote Yes

Type Information disclosure

Description

An improper access control flaw in GitLab CE/EE since version 13.9 exposes private email address of Issue and Merge Requests assignee to Webhook data consumers.

AVG-2503 gitlab 14.3.3-1 Medium Vulnerable

https://about.gitlab.com/releases/2021/10/28/security-release-gitlab-14-4-1-released/