CVE-2021-39935

MEDIUM6.8

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10

Published Dec 13, 2021

Modified 1 months ago

Details

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

References

WEB

https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39935.json

WEB

https://gitlab.com/gitlab-org/gitlab/-/issues/346187

WEB

https://hackerone.com/reports/1236965

WEB

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-39935

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2021-39935

CVSS Analysis