CVE-2021-22243
Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address to gain access into a group.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"7.10.0"},{"fixed":"13.12.9"},{"introduced":"14.0.0"},{"fixed":"14.0.7"},{"introduced":"14.1.0"},{"fixed":"14.1.2"}]}]
Références
- advisory gitlab.com
- report gitlab.com
- web nvd.nist.gov