{"id":"CVE-2021-22214","published":"2021-06-08T14:59:37Z","modified":"2024-08-03T18:37:18Z","title":"When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab…","vendor":"GitLab","product":"GitLab","tier":"core","eol":null,"affectedVersions":[{"vendor":"GitLab","product":"GitLab","versions":[">=10.5, <13.10.5",">=13.11, <13.11.5",">=13.12, <13.12.2"]}],"description":{"text":"When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited","provenance":"source","from":"CVE.org"},"summary":null,"cvss":{"score":6.8,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.27806,"percentile":0.98089,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2023-12-12","exploitedFirstSeen":"2023-12-12","ransomware":false,"evidence":[{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-12&host_type=src&vulnerability=cve-2021-22214","date":"2023-12-12"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-18&host_type=src&vulnerability=cve-2021-22214","date":"2023-12-18"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-01-16&host_type=src&vulnerability=cve-2021-22214","date":"2024-01-16"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-01-22&host_type=src&vulnerability=cve-2021-22214","date":"2024-01-22"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-01-31&host_type=src&vulnerability=cve-2021-22214","date":"2024-01-31"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-02-01&host_type=src&vulnerability=cve-2021-22214","date":"2024-02-01"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-02-05&host_type=src&vulnerability=cve-2021-22214","date":"2024-02-05"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-02-12&host_type=src&vulnerability=cve-2021-22214","date":"2024-02-12"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-02-21&host_type=src&vulnerability=cve-2021-22214","date":"2024-02-21"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-02-22&host_type=src&vulnerability=cve-2021-22214","date":"2024-02-22"}],"evidenceTotal":241,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/322926","tags":["x_refsource_MISC"]},{"url":"https://hackerone.com/reports/1110131","tags":["x_refsource_MISC"]},{"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22214.json","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2021-9360","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-9360","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":4,"skipped":0,"earliest":"2021-06-22","earliestUrl":"https://github.com/aaminin/CVE-2021-22214","repos":[{"name":"ZZ-SOCMAP/CVE-2021-22214","url":"https://github.com/ZZ-SOCMAP/CVE-2021-22214","stars":10,"created":"2021-11-01"},{"name":"kh4sh3i/GitLab-SSRF-CVE-2021-22214","url":"https://github.com/kh4sh3i/GitLab-SSRF-CVE-2021-22214","stars":3,"created":"2022-01-04"},{"name":"aaminin/CVE-2021-22214","url":"https://github.com/aaminin/CVE-2021-22214","stars":1,"created":"2021-06-22"},{"name":"Vulnmachines/gitlab-cve-2021-22214","url":"https://github.com/Vulnmachines/gitlab-cve-2021-22214","stars":0,"created":"2021-06-29"}]},"nuclei":[{"id":"CVE-2021-22214","name":"Gitlab CE/EE 10.5 - Server-Side Request Forgery","severity":"high","path":"http/cves/2021/CVE-2021-22214.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22214.yaml"}],"first":{"date":"2021-06-22","source":"PoC-in-GitHub","url":"https://github.com/aaminin/CVE-2021-22214"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-06-08","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-22214","provenance":"source"},{"date":"2021-06-22","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/aaminin/CVE-2021-22214","provenance":"source"},{"date":"2023-12-12","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-12-12&host_type=src&vulnerability=cve-2021-22214","provenance":"source"}],"speed":{"daysToPublicExploit":14,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":64.4,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1052 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.62,"detail":"percentile 0.9809"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"4 PoC-in-GitHub repos; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":4.76,"detail":"base score 6.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}