Firetruck

CVE-2021-22175

KEV
Updated Oct 1, 2026 · PUBLISHED
View KEV entry →

Description

GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
GitLabGitLab / GitLab>=10.5, <13.6.7affected
GitLabGitLab / GitLab>=13.7, <13.7.7affected
GitLabGitLab / GitLab>=13.8, <13.8.4affected