← All credits
Thanks @maruthi12 for reporting this vulnerability through our HackerOne bug bounty program
2 vulnerability records and advisories credit this contributor.
CVE-2021-22231
A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access to their profile page via using a specially crafted username.
CVE-2021-22256
Improper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to create issues for Sentry errors and track their status