CVE-2021-22179: SSRF
Published Mar 24, 2021
·Updated
A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature.
Affected Software
6 affected components
GitLab GitLab>=12.2.0<13.6.6
GitLab GitLab>=12.2.0<13.6.6
GitLab GitLab>=13.7.0<13.7.6
GitLab GitLab>=13.7.0<13.7.6
GitLab GitLab>=13.8.0<13.8.2
GitLab GitLab>=13.8.0<13.8.2
Event History
Mar 24, 2021
CVE Published
via MITRE·04:48 PM
Data Sourced
via MITRE·04:48 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22179?
CVE-2021-22179 has been assigned a medium severity rating due to its potential to allow server-side request forgery (SSRF) attacks.
2
How do I fix CVE-2021-22179?
To fix CVE-2021-22179, upgrade GitLab to version 12.2.0 or later, specifically to a version greater than 13.6.6.
3
Which versions of GitLab are affected by CVE-2021-22179?
CVE-2021-22179 affects GitLab versions from 12.2.0 up to and including 13.6.6.
4
What type of attack does CVE-2021-22179 allow?
CVE-2021-22179 allows for server-side request forgery (SSRF) attacks through the Outbound Requests feature.
5
Is CVE-2021-22179 applicable to both community and enterprise editions?
Yes, CVE-2021-22179 affects both the community and enterprise editions of GitLab.