Published: 28/03/2022 Updated: 12/07/2022

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 542

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted sign-ups may be vulnerable to user enumeration to unauthenticated users through the GraphQL API.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gitlab gitlab

Check Point Reference: CPAI-2021-2073 Date Published: 21 Dec 2023 Severity: Medium ...

This module queries the GitLab GraphQL API without authentication to acquire the list of GitLab users (CVE-2021-4191) The module works on all GitLab versions from 130 up to 1482, 1474, and 1465 ...

This module queries the GitLab GraphQL API without authentication to acquire the list of GitLab users (CVE-2021-4191). The module works on all GitLab versions from 13.0 up to 14.8.2, 14.7.4, and 14.6.5.

msf > use auxiliary/scanner/http/gitlab_graphql_user_enum
msf auxiliary(gitlab_graphql_user_enum) > show actions
    ...actions...
msf auxiliary(gitlab_graphql_user_enum) > set ACTION < action-name >
msf auxiliary(gitlab_graphql_user_enum) > show options
    ...show and set options...
msf auxiliary(gitlab_graphql_user_enum) > run

a Curated list of gitlab vulnerability

Gitlab-CVE a Curated list of gitlab vulnerability CVE-2021-22205 [critical] An issue has been discovered in GitLab CE/EE affecting all versions starting from 119 GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution targetcom/users/sign_in CVE-2021-22214 [

My CVE, bug bounty, and general cybersec relevant reading list and notes Misc Links National Vulnerability Database: here NVD CVE search: here NVD data feeds listing: here CVE details CVSS distribution listing: here Mitre CVE search: here Pentesterland list of bug bounty writeups: here JFrog security research blogroll: here vuldb listing: here 2022 March Title

CVE-2021-4191_Exploits pip install python-graphql-client Usage: python3 gitlab_enumpy --rurl 10006/api/graphql Copyrights: wwwrapid7com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/

A PoC exploit for CVE-2021-4191 - GitLab User Enumeration.

CVE-2021-4191 - GitLab User Enumeration GitLab is a widely-used web-based DevOps lifecycle tool that offers a Git-repository manager with integrated features for continuous integration, issue tracking, code reviews, and more The GraphQL API is a powerful interface that enables users to interact with GitLab programmatically and perform various actions The GitLab CVE-2021-4191

A PoC exploit for CVE-2021-4191 - GitLab User Enumeration.

CVE-2021-4191 - GitLab User Enumeration GitLab is a widely-used web-based DevOps lifecycle tool that offers a Git-repository manager with integrated features for continuous integration, issue tracking, code reviews, and more The GraphQL API is a powerful interface that enables users to interact with GitLab programmatically and perform various actions The GitLab CVE-2021-4191

A really good cybersec reading materials.

really-good-cybersec A really good cybersec reading materials Implementing a toy version of TLS 13 jvnsca/blog/2022/03/23/a-toy-version-of-tls/ tmpoutsh tmpoutsh/2/ Logic Flaw Leading to RCE in Dynamicweb 950 - 9127 blogassetnoteio/2022/02/20/logicflaw-dynamicweb-rce/ RWCTF 4th Desperate Cat Writeup githubcom/voidfyoo/rwctf-4th

NVD-CWE-noinfo https://gitlab.com/gitlab-org/gitlab/-/issues/343898 https://hackerone.com/reports/1089609 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4191.json https://nvd.nist.gov https://github.com/kh4sh3i/Gitlab-CVE https://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2021-2073.html

CVE-2021-4191

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Metasploit Modules

Github Repositories

References

Vulmon Search

About

Products

Connect