NetSight
IP …
medium6.8

CVE-2021-22214

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting fro…

Impact

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited

Affected products

VendorProductAffected versions
GitlabGitlab
from 10.5 before 13.10.5
from 13.11 before 13.11.5
from 13.12 before 13.12.2

Weakness classification

CWE-918

References