CVE-2021-22251

Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with email address domain…

Medium · published August 23, 2021

CVSS v3.1
4.3
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with email address domain that should be blocked by group settings

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00819 · 56.7th percentile
Published
2021-08-23T19:38Z
EPSS history
Timeline
  • 23 AUG 19:38Z
    Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with email address domain…
    cvelistv5