Unrated severityNVD Advisory· Published Aug 23, 2021· Updated Aug 3, 2024
CVE-2021-22251
CVE-2021-22251
Description
Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with email address domain that should be blocked by group settings
Affected products
3- Range: >=12.2
- Range: >=12.2, <13.12.9
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22251.jsonmitrex_refsource_CONFIRM
- gitlab.com/gitlab-org/gitlab/-/issues/14004mitrex_refsource_MISC
- hackerone.com/reports/679567mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.