CVE-2021-4191 PoC — GitLab Enterprise Edition和GitLab Community Edition 授权问题漏洞

Source

https://github.com/Adelittle/CVE-2021-4191_Exploits

Associated Vulnerability

Title:GitLab Enterprise Edition和GitLab Community Edition 授权问题漏洞 (CVE-2021-4191)
Description:An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted sign-ups may be vulnerable to user enumeration to unauthenticated users through the GraphQL API.

Readme

# CVE-2021-4191_Exploits

pip install python-graphql-client

Usage: 
python3 gitlab_enum.py --rurl http://10.0.0.6/api/graphql

Copyrights: https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →