CVE-2021-22179

Description

A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature.

How to fix CVE-2021-22179

To remediate CVE-2021-22179, upgrade the affected package to a fixed version below.

• Bitnami/gitlab—upgrade to 13.6.6 or later

Is CVE-2021-22179 being exploited?

Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• >= 12.2.0, < 13.6.6, >= 13.7.0, < 13.7.6, >= 13.8.0, < 13.8.2

CVSS scores

References (4)

• WEBgitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22179.json
• WEBgitlab.com/gitlab-org/gitlab/-/issues/293733
• WEBhackerone.com/reports/1055816
• WEBnvd.nist.gov/vuln/detail/CVE-2021-22179