CVE-2021-22251

Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with email address...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with email address domain that should be blocked by group settings

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"12.2.0"},{"fixed":"13.12.9"},{"introduced":"14.0.0"},{"fixed":"14.0.7"},{"introduced":"14.1.0"},{"fixed":"14.1.2"}]}]

参照URL

advisory gitlab.com
advisory gitlab.com
advisory hackerone.com
web nvd.nist.gov