CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-04-23
GitLab CE/EE Unauthenticated Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2021-22205)
[Affected Scope] All GitLab Community Edition (CE) and Enterprise Edition (EE) versions starting from 11.9
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with the privileges of the GitLab user by uploading a specially crafted image file
[Mitigation] Immediately upgrade the GitLab instance to the latest patched versions (13.10.3, 13.9.6, 13.8.8, or higher)