Vulnerability identifier: #VU52499

Vulnerability risk: Medium

CVSSv3.1: 8.4 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2021-22205

CWE-ID: CWE-78

Exploitation vector: Network

Exploits in database: 24

• July 21, 2022
  • CVE-2021-22205 (CVE-2021-22205 检测脚本,支持getshell和命令执行) [Github]
• February 6, 2022
  • GitLab-cve-2021-22205-nse (NSE script to fingerprint if GitLab is vulnerable to cve-2021-22205-nse) [Github]
• December 15, 2021
  • CVE-2021-22205 (Pocsuite3 For CVE-2021-22205) [Github]
• November 29, 2021
  • Golang-CVE-2021-22205-POC (A CVE-2021-22205 Gitlab RCE POC written in Golang) [Github]
• November 25, 2021
  • GitLab 13.10.2 - Remote Code Execution (RCE) (Unauthenticated) [Exploit-DB]
• November 11, 2021
  • CVE-2021-22205 (GitLab CE/EE Preauth RCE using ExifTool) [Github]
  • GitLab-CVE-2021-22205-scanner () [Github]
• November 8, 2021
  • Automated-Gitlab-RCE (Automated Gitlab RCE via CVE-2021-22205) [Github]
  • GitLab-CVE-2021-22205- (Exploit for GitLab CVE-2021-22205 Unauthenticated Remote Code Execution) [Github]
• November 4, 2021
  • Gitlab_RCE_CVE_2021_2205 () [Github]
  • CVE-2021-22205 (CVE-2021-22205& GitLab CE/EE RCE) [Github]
• November 3, 2021
  • GitLab Unauthenticated Remote ExifTool Command Injection [Metasploit]
• November 2, 2021
  • Gitlab_RCE_CVE_2021_22205 () [Github]
• November 1, 2021
  • CVE-2021-22205 (personal) [Github]
  • CVE-2021-22205 () [Github]
  • CVE-2021-22205-getshell (CVE-2021-22205-getshell) [Github]
  • CVE-2021-22205 (CVE-2021-22205 Gitlab 未授权远程代码执行漏洞 EXP, 移除了对djvumake & djvulibre的依赖，可在win平台使用) [Github]
  • CVE-2021-22205 (Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP CVE-2021-22205) [Github]
  • CVE-2021-22205 (CVE-2021-22205 RCE ) [Github]
  • GitLab-preauth-RCE_CVE-2021-22205 (PoC in single line bash) [Github]
  • CVE-2021-22205 (CVE-2021-22205未授权漏洞批量检测与利用工具) [Github]
• October 29, 2021
  • CVE-2021-22205 (Pocsuite3 For CVE-2021-22205) [Github]
  • CVE-2021-22205 (CVE-2021-22205 Unauthorized RCE) [Github]
• June 6, 2021
  • Gitlab-CVE-2021-22205 () [Github]

Impact: Code execution

Vulnerable software:
Gitlab Community Edition
Universal components / Libraries / Software for developers
GitLab Enterprise Edition
Universal components / Libraries / Software for developers

Vendor: GitLab, Inc