NetSight
medium5.0

CVE-2021-22243

Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address to gain …

Impact

Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address to gain access into a group.

Affected products

VendorProductAffected versions
GitlabGitlab
from 7.10.0 before 13.12.9
from 14.0.0 before 14.0.7
from 14.1.0 before 14.1.2

Weakness classification

References