CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-06-11
GitLab Server-Side Request Forgery (SSRF) in Internal Network Webhooks (CVE-2021-22175)
[Affected Scope] All GitLab versions starting from 10.5 where internal network requests for webhooks are enabled
[Impact] Unauthenticated attackers can bypass registration restrictions to trigger SSRF, accessing sensitive internal network resources and metadata
[Mitigation] Upgrade to the latest patched GitLab version immediately, or disable the 'Allow requests to the local network from web hooks and services' setting