CVEs-PoC/2021/CVE-2021-4191.md

CVE-2021-4191

Description

An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted sign-ups may be vulnerable to user enumeration to unauthenticated users through the GraphQL API.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Adelittle/CVE-2021-4191_Exploits
• https://github.com/K3ysTr0K3R/CVE-2021-4191-EXPLOIT
• https://github.com/K3ysTr0K3R/K3ysTr0K3R
• https://github.com/bigpick/cve-reading-list
• https://github.com/fardeen-ahmed/Bug-bounty-Writeups
• https://github.com/insecrez/Bug-bounty-Writeups
• https://github.com/j4k0m/really-good-cybersec
• https://github.com/kh4sh3i/Gitlab-CVE