CVE-2021-4191 Scanner
Detects 'User Enumeration' vulnerability in GitLab affects v. 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2.
Used 3.4k times · 3.4k assets checked · domain, ipv4, subdomain
CVE
CVE-2021-4191
5.3
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description
An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted sign-ups may be vulnerable to user enumeration to unauthenticated users through the GraphQL API.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
gitlab
Updated Oct 24, 2026View on NVD →
S4E scanner
CVE history: gitlab
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →