{"vulnerability": "cve-2021-2224", "sightings": [{"uuid": "c36d0c19-1ec2-4aa1-8771-f52d18bcb1c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22243", "type": "seen", "source": "https://t.me/cibsecurity/27880", "content": "\u203c CVE-2021-22243 \u203c\n\nUnder specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address to gain access into a group.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-25T22:25:59.000000Z"}, {"uuid": "fb3d668f-1cdd-41ec-a9d6-6e831f526b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22245", "type": "seen", "source": "https://t.me/cibsecurity/27875", "content": "\u203c CVE-2021-22245 \u203c\n\nImproper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-25T22:25:51.000000Z"}, {"uuid": "ede8e843-c766-496b-8d9b-e22044c9b917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22244", "type": "seen", "source": "https://t.me/cibsecurity/27872", "content": "\u203c CVE-2021-22244 \u203c\n\nImproper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-25T22:25:46.000000Z"}, {"uuid": "0d9a333f-513f-4ecb-b919-53f17e30eebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22242", "type": "seen", "source": "https://t.me/cibsecurity/27879", "content": "\u203c CVE-2021-22242 \u203c\n\nInsufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-25T22:25:57.000000Z"}, {"uuid": "21405237-2677-49e6-9ac5-cb8aa6846b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22249", "type": "seen", "source": "https://t.me/cibsecurity/27734", "content": "\u203c CVE-2021-22249 \u203c\n\nA verbose error message in GitLab EE affecting all versions since 12.2 could disclose the private email address of a user invited to a group\n\n? Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-24T00:23:35.000000Z"}, {"uuid": "b4f15cf2-5e62-4412-813d-200bdcc25faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-22248", "type": "seen", "source": "https://t.me/cibsecurity/27732", "content": "\u203c CVE-2021-22248 \u203c\n\nImproper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information for public projects that have access to pipelines restricted to members only\n\n? Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-24T00:23:33.000000Z"}]}