vulnerability

Gitlab Gitlab: CVE-2021-22240: Incorrect Authorization

Severity
4
CVSS
(AV:N/AC:H/Au:S/C:P/I:P/A:N)
Published
Aug 5, 2021
Added
Apr 22, 2025
Modified
May 5, 2025

Description

Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabled

Solution

gitlab-gitlab-cve-2021-22240-solution
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.