CVE-2021-22251

PoC —

CVSS 3.1

4.3 medium

EPSS

<1%p55

Published

Aug 23, 2021 (Aug 23, 2021)

Modified

Jun 17, 2026

Description

Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with email address domain that should be blocked by group settings

Vendors: gitlab
Products: gitlab
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.