CVE-2021-22240

Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabled...

GitLab 13.7 < 13.11.6 / 13.12 < 13.12.6 / 14.0 < 14.0.2 (CVE-2021-22240)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabled CVE-2021-22240 Note that Nessus has not tested f...

CVE-2021-22240

CVE-2021-22240: Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign-on despite the user cap being enabled. Multiple connected sources (NVD, Red Hat, OSV, Nessus, PRION, Debian tracker, CVE lists) corroborate the affected versions a...