---

CVE-2021-22231 - log back

CVE-2021-22231 edited at 06 Jul 2021 18:02:11
Description	- A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 and before 14.0.2 that allows attacker to reject access to their profile page via using a specially crafted username. + A denial of service on the user's profile page is found starting with GitLab CE/EE 8.0 and before 14.0.2 that allows an attacker to reject access to their profile page by using a specially crafted username.
References	https://gitlab.com/gitlab-org/gitlab/-/issues/26295 https://hackerone.com/reports/475098 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22231.json

CVE-2021-22231 created at 06 Jul 2021 17:46:40
Severity	+ Low
Remote	+ Remote
Type	+ Denial of service
Description	+ A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 and before 14.0.2 that allows attacker to reject access to their profile page via using a specially crafted username.
References	+ https://gitlab.com/gitlab-org/gitlab/-/issues/26295 + https://hackerone.com/reports/475098 + https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22231.json
Notes