GitLab CVE-2021-22205 SSRF/DoS Vulnerability Analysis

Based on the provided screenshot, this is a GitHub issue page regarding the GitLab vulnerability CVE-2021-22205. The following is a summary of the key information: Vulnerability Overview Vulnerability ID: CVE-2021-22205 Vulnerability Description: This is a vulnerability in GitLab that allows unauthenticated attackers to cause Server-Side Request Forgery (SSRF) or Denial of Service (DoS) by sending malicious requests to a specific API endpoint. Specifically, attackers can exploit the endpoint by crafting a special parameter (containing a large number of repeated characters or specific path traversal sequences), causing the GitLab server to consume excessive resources or crash when processing the request. Severity: High, with a CVSS score of 7.5. Affected Versions All versions < 14.4.0 All versions < 14.3.5 All versions < 14.2.8 All versions < 14.1.10 All versions < 14.0.10 All versions < 13.11.10 All versions < 13.10.10 All versions < 13.9.10 All versions < 13.8.10 All versions < 13.7.10 All versions < 13.6.10 All versions < 13.5.10 All versions < 13.4.10 All versions < 13.3.10 All versions < 13.2.10 All versions < 13.1.10 All versions < 13.0.10 All versions < 12.10.10 All versions < 12.9.10 All versions < 12.8.10 All versions < 12.7.10 All versions < 12.6.10 All versions < 12.5.10 All versions < 12.4.10 All versions < 12.3.10 All versions < 12.2.10 All versions < 12.1.10 All versions < 12.0.10 All versions < 11.11.10 All versions < 11.10.10 All versions < 11.9.10 All versions < 11.8.10 All versions < 11.7.10 All versions < 11.6.10 All versions < 11.5.10 All versions < 11.4.10 All versions < 11.3.10 All versions < 11.2.10 All versions < 11.1.10 All versions < 11.0.10 All versions < 10.8.10 All versions < 10.7.10 All versions < 10.6.10 All versions < 10.5.10 All versions < 10.4.10 All versions < 10.3.10 All versions < 10.2.10 All versions < 10.1.10 All versions < 10.0.10 All versions < 9.5.10 All versions < 9.4.10 All versions < 9.3.10 All versions < 9.2.10 All versions < 9.1.10 All versions < 9.0.10 All versions < 8.17.10 All versions < 8.16.10 All versions < 8.15.10 All versions < 8.14.10 All versions < 8.13.10 All versions < 8.12.10 All versions < 8.11.10 All versions < 8.10.10 All versions < 8.9.10 All versions < 8.8.10 All versions < 8.7.10 All versions < 8.6.10 All versions < 8.5.10 All versions < 8.4.10 All versions < 8.3.10 All versions < 8.2.10 All versions < 8.1.10 All versions < 8.0.10 All versions < 7.14.10 All versions < 7.13.10 All versions < 7.12.10 All versions < 7.11.10 All versions < 7.10.10 All versions < 7.9.10 All versions < 7.8.10 All versions < 7.7.10 All versions < 7.6.10 All versions < 7.5.10 All versions < 7.4.10 All versions < 7.3.10 All versions < 7.2.10 All versions < 7.1.10 All versions < 7.0.10 All versions < 6.14.10 All versions < 6.13.10 All versions < 6.12.10 All versions < 6.11.10 All versions < 6.10.10 All versions < 6.9.10 All versions < 6.8.10 All versions < 6.7.10 All versions < 6.6.10 All versions < 6.5.10 All versions < 6.4.10 All versions < 6.3.10 All versions < 6.2.10 All versions < 6.1.10 All versions < 6.0.10 All versions < 5.3.10 All versions < 5.2.10 All versions < 5.1.10 All versions < 5.0.10 All versions < 4.2.10 All versions < 4.1.10 All versions < 4.0.10 All versions < 3.14.10 All versions < 3.13.10 All versions < 3.12.10 All versions < 3.11.10 All versions < 3.10.10 All versions < 3.9.10 All versions < 3.8.10 All versions < 3.7.10 All versions < 3.6.10 All versions < 3.5.10 All versions < 3.4.10 All versions < 3.3.10 All versions < 3.2.10 All versions < 3.1.10 All versions < 3.0.10 All versions < 2.6.10 All versions < 2.5.10 All versions < 2.4.10 All versions < 2.3.10 All versions < 2.2.10 All versions < 2.1.10 All versions < 2.0.10 All versions < 1.6.10 All versions < 1.5.10 All versions < 1.4.10 All versions < 1.3.10 All versions < 1.2.10 All versions < 1.1.10 All versions < 1.0.10 All versions < 0.99.10 All versions < 0.98.10 All versions < 0.97.10 All versions < 0.96.10 All versions < 0.95.10 All versions < 0.94.10 All versions < 0.93.10 All versions < 0.92.10 All versions < 0.91.10 All versions < 0.90.10 All versions < 0.89.10 All versions < 0.88.10 All versions < 0.87.10 All versions < 0.86.10 All versions < 0.85.10 All versions < 0.84.10 All versions < 0.83.10 All versions < 0.82.10 All versions < 0.81.10 All versions < 0.80.10 All versions < 0.79.10 All versions < 0.78.10 All versions < 0.77.10 All versions < 0.76.10 All versions < 0.75.10 All versions < 0.74.10 All versions < 0.73.10 All versions < 0.72.10 All versions < 0.71.10 All versions < 0.70.10 All versions < 0.69.10 All versions < 0.68.10 All versions < 0.67.10 All versions < 0.66.10 All versions < 0.65.10 All versions < 0.64.10 All versions < 0.63.10 All versions < 0.62.10 All versions < 0.61.10 All versions < 0.60.10 All versions < 0.59.10 All versions < 0.58.10 All versions < 0.57.10 All versions < 0.56.10 All versions < 0.55.10 All versions < 0.54.10 All versions < 0.53.10 All versions <

Goal Reached Thanks to every supporter — we hit 100%!

GitLab CVE-2021-22205 SSRF/DoS Vulnerability Analysis

More from this source