Security Advisory

CVE-2021-22214

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-06-08 14:59:37

Last updated 2024-08-03 18:37:18

Assigner GitLab

CVSS score 6.8

State PUBLISHED

Description

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited

← Browse all CVEs View on cve.org ↗