4.2
Medium
CVE-2021-22240 Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on…
Description
Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabled
Affected products and versions
References
- gitlab.com gitlab.com
- hackerone.com hackerone.com
- gitlab.com gitlab.com
Timeline
- Published
- Last modified
Other CVEs of GitLab EE
The 10 CVEs of GitLab EE →
CVE-2020-26412
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics…
3.1
Low
CVE-2020-26416
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms…
4.0
Medium
CVE-2020-13349
An issue has been discovered in GitLab EE affecting all versions starting from 8.12
4.3
Medium
CVE-2020-13348
An issue has been discovered in GitLab EE affecting all versions starting from 10.2
5.7
Medium