3 matches found
CVE-2025-31478 Zulip Authentication Backend Configuration Bypass
Zulip is an open-source team collaboration tool. Zulip supports a configuration where account creation is limited solely by being able to authenticate with a single-sign on authentication backend, meaning the organization places no restrictions on email address domains or invitations being requir...
8.2CVSS8.2AI score0.0034EPSS
SaveExploits0References2
BIT-GITLAB-2021-22251
Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with email address domain that should be blocked by group settings...
4.3CVSS4.1AI score0.00819EPSS
SaveExploits1References4
20