Dashboard / CVE-2021-22175

CVE-2021-22175

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled.

CISA Known Exploited Vulnerability

Vendor / Product GitLab — GitLab
Date Added 2026-02-18
Remediation Due 2026-03-11
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22175.json ; https://nvd.nist.gov/vuln/detail/CVE-2021-22175

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
gitlab gitlab 10.5.0 – 13.6.7
gitlab gitlab 10.5.0 – 13.6.7
gitlab gitlab 13.7.0 – 13.7.7
gitlab gitlab 13.7.0 – 13.7.7
gitlab gitlab 13.8.0 – 13.8.4
gitlab gitlab 13.8.0 – 13.8.4

References & Advisories (4)

https://hackerone.com/reports/1059596
Permissions Required Third Party Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/294178
Exploit Issue Tracking Vendor Advisory

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links