← All credits
Thanks @jimeno for reporting this vulnerability through our HackerOne bug bounty program
2 vulnerability records and advisories credit this contributor.
CVE-2021-22249
A verbose error message in GitLab EE affecting all versions since 12.2 could disclose the private email address of a user invited to a group
CVE-2021-22250
Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation tokens that administrators created for their account