CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
GitLab CE/EE Unauthenticated Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2021-22205)
[Affected Scope] All GitLab Community Edition (CE) and Enterprise Edition (EE) versions starting from 11.9
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with the privileges of the GitLab user by uploading a specially crafted image file
[Mitigation] Immediately upgrade the GitLab instance to the latest patched versions (13.10.3, 13.9.6, 13.8.8, or higher)
ExifTool DjVu File Parsing Arbitrary Code Execution Vulnerability (CVE-2021-22204) Security Advisory
[Affected Scope] ExifTool versions 7.44 up to 12.24, and third-party integrations such as GitLab that utilize ExifTool for metadata parsing
[Impact] Unauthenticated remote attackers can execute arbitrary commands on the host system by uploading a specially crafted DjVu image
[Mitigation] Immediately upgrade ExifTool to version 12.24 or higher, and update GitLab instances to 13.10.3, 13.9.6, 13.8.8, or newer