Medium · 4.2 CVE-2021-22240 EUVD-2021-9386GHSA-79vw-576r-jwjv

Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap b…

Published Aug 5, 2021 · Updated Aug 3, 2024 · Assigned by GitLab

Vendor: GitLab Product: GitLab EE Category: Web / CMS

Description

Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabled

Affected products

Vendor	Product	Affected	Fixed
GitLab	GitLab EE	>=13.7, <13.11.6, >=13.12, <13.12.6, >=14.0, <14.0.2	—

References

https://gitlab.com/gitlab-org/gitlab/-/issues/327641
https://hackerone.com/reports/1166566
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22240.json