CVE-2021-22243
Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address...
Original description
The description as published by the source.
Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address to gain access into a group.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"7.10.0"},{"fixed":"13.12.9"},{"introduced":"14.0.0"},{"fixed":"14.0.7"},{"introduced":"14.1.0"},{"fixed":"14.1.2"}]}]
References
- advisory gitlab.com
- report gitlab.com
- web nvd.nist.gov