CVE-2021-22175: medium-severity vulnerability in GitLab
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
GitLab allowed unauthenticated attackers to make unauthorized requests to internal networks through webhooks, even when user registration was disabled. This could be exploited to access sensitive internal systems or services that should not be reachable from the internet.
A server-side request forgery (SSRF) vulnerability in GitLab's webhook functionality (CWE-918) allowed unauthenticated attackers to craft malicious webhook requests targeting internal network resources. The vulnerability required webhook functionality to be enabled but bypassed authentication controls, potentially enabling reconnaissance or exploitation of internal services not directly exposed to the internet.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.