Vulnerabilities CVE-2021-22205

CVE-2021-22205

Critical

Open

KEV

TLP:CLEAR

GitLab Community and Enterprise Editions Remote Code Execution Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

Details

CVSS Score: 10.0
EPSS Score ⓘ: 99.73%

100th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Confidence: 100%
Published: Apr 23, 2021
Last Modified: Aug 6, 2026
CISA KEV
Date Added: Nov 3, 2021
Patch Due: Nov 17, 2021
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.