[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2021-22240":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":25,"cwes":26,"cpes":28,"technologies":77,"references":79,"score":83,"epss_score":84,"epss_percentile":85,"is_kev":86,"cisa_kev_date_added":87,"cisa_kev_due_date":87,"cisa_ssvc":88,"attack_mappings":94,"exploits":101},281255,"CVE-2021-22240","EUVD-2021-9386","Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabled","2021-08-05T20:15:00Z",{"cvss_v2.0":10,"cvss_v3.1":19},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":18,"confidentialityImpact":18},"2.0",4,"NETWORK","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL","LOW","NONE",{"scope":20,"version":21,"baseScore":22,"attackVector":13,"baseSeverity":23,"vectorString":24,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":18,"privilegesRequired":17,"confidentialityImpact":18},"UNCHANGED","3.1",4.3,"MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",true,[27],"CWE-863",[29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76],"cpe:2.3:a:gitlab:gitlab:13.8.5:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.10.2:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.11.2:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.8.8:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.12.3:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.12.1:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.7.8:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.7.2:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.9.3:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.9.4:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.11.4:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.11.3:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.7.1:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.8.4:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.9.7:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.10.3:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.9.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.12.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:14.0.1:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.8.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.7.9:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.7.7:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.10.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.7.4:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.8.1:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:14.0.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.7.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.9.6:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.9.1:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.8.7:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.8.2:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.8.3:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.11.5:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.10.5:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.11.1:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.7.3:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.9.5:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.12.4:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.8.6:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.12.2:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.10.4:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.9.2:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.11.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.12.5:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.10.1:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.7.6:*:*:*:enterprise:*:*:*","cpe:2.3:a:gitlab:gitlab:13.7.5:*:*:*:enterprise:*:*:*",[78],"Gitlab Gitlab",[80,81,82],"https:\u002F\u002Fgitlab.com\u002Fgitlab-org\u002Fcves\u002F-\u002Fblob\u002Fmaster\u002F2021\u002FCVE-2021-22240.json","https:\u002F\u002Fgitlab.com\u002Fgitlab-org\u002Fgitlab\u002F-\u002Fissues\u002F327641","https:\u002F\u002Fhackerone.com\u002Freports\u002F1166566",0.57,0.00662,0.51375,false,null,{"timestamp":87,"automatable":89,"tech_impact":90,"exploitation":91,"cisa_decision":92,"cisa_remediation_timeline":93},"no","partial","none",{},"FSU",[95],{"name":96,"source":97,"tactics":98,"technique_id":100},"Exploit Public-Facing Application","attack_vector",[99],"initial-access","T1190",[102],{"link":82}]