← Back to browse · API

CVE-2021-4191

Severity
MEDIUM
CVSS
5.3
EPSS
0.80004
Risk score
49.2
CISA KEV
No
PoC
No
Published
2022-03-28
Modified
2024-08-03
First seen
2026-08-08
Aliases
EUVD-2021-34051, GHSA-M37Q-W59J-4VR4
Products
GitLab:GitLab 13.0, <14.6.5, GitLab:GitLab 14.7, <14.7.4, GitLab:GitLab 14.8, <14.8.2
Sources
euvd EUVD-2021-34051

Description

An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted sign-ups may be vulnerable to user enumeration to unauthenticated users through the GraphQL API.

References