Firetruck

CVE-2021-39935

KEV
Updated Feb 3, 2026 · PUBLISHED
View KEV entry →

Description

GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side Requests via the CI Lint API.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
GitLabGitLab / GitLab>=10.5, <14.3.6affected
GitLabGitLab / GitLab>=14.4, <14.4.4affected
GitLabGitLab / GitLab>=14.5, <14.5.2affected