p PatchFirst

CVE-2021-22251

CVE-2021-22251

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with email address domain that should be blocked by group settings

CVSS 4.3 · Medium · EPSS 0.8%

Published
Updated

Stack: system

Affected products and versions

  • gitlab

    Versions
    • >=12.2, <13.12.9: Affected
    • >=14.0, <14.0.7: Affected
    • >=14.1, <14.1.2: Affected

    No fix published

  • gitlab Ubuntu:16.04:LTS

    Versions
    • 8.4.3+dfsg-9
    • 8.4.3+dfsg-12
    • 8.5.8+dfsg-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →