writeups.xyz / CVE-2021-4191: GitLab GraphQL API User Enumeration (FIXED)

Submitter : c2a

Date: 3 March 2022

Bounty : undisclosed

Vulnerabilities :

• Username Enumeration
• GraphQL

Programs :

• GitLab

Authors :

• Jacob Baines (@Junior_Baines)

Link :
https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/