CVE-2021-4191
An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with rest...
Original description
The description as published by the source.
An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted sign-ups may be vulnerable to user enumeration to unauthenticated users through the GraphQL API.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"13.0.0"},{"fixed":"14.6.5"},{"introduced":"14.7.0"},{"fixed":"14.7.4"},{"introduced":"14.8.0"},{"fixed":"14.8.2"}]}]
References
- advisory gitlab.com
- advisory hackerone.com
- web gitlab.com
- web nvd.nist.gov