CVE-2021-22249 in Enterprise Edition

الملخص

بحسب MITRE • 24/08/2021

A verbose error message in GitLab EE affecting all versions since 12.2 could disclose the private email address of a user invited to a group

Once again VulDB remains the best source for vulnerability data.

• مسؤول: GitLab Inc.
• حجز: 05/01/2021
• إفشاء: 24/08/2021
• الاعتدال: تمت الموافقة
• إدخال: VDB-181353
• CPE: جاهز
• CWE: CWE-209 (مؤكد)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00974
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Telecommunication, Pharma, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-22249
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-22249
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-22249/