{ "id": "CVE-2021-22205", "sourceIdentifier": "cve@gitlab.com", "published": "2021-04-23T18:15:08.167", "lastModified": "2025-03-13T16:41:34.737", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution." }, { "lang": "es", "value": "Se ha detectado un problema en GitLab CE/EE que afecta a todas las versiones a partir de 11.9. GitLab no estaba comprobado apropiadamente archivos de imagen que fueron pasados a un analizador de archivos, lo que result\u00f3 en una ejecuci\u00f3n de comando remoto" } ], "metrics": { "cvssMetricV31": [ { "source": "cve@gitlab.com", "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10.0, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, "exploitabilityScore": 3.9, "impactScore": 6.0 }, { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10.0, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, "exploitabilityScore": 3.9, "impactScore": 6.0 } ], "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "baseScore": 7.5, "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "NONE", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "availabilityImpact": "PARTIAL" }, "baseSeverity": "HIGH", "exploitabilityScore": 10.0, "impactScore": 6.4, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "cisaExploitAdd": "2021-11-03", "cisaActionDue": "2021-11-17", "cisaRequiredAction": "Apply updates per vendor instructions.", "cisaVulnerabilityName": "GitLab Community and Enterprise Editions Remote Code Execution Vulnerability", "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-94" } ] }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-94" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding": "11.9.0", "versionEndExcluding": "13.8.8", "matchCriteriaId": "01EAFA19-205A-4512-9B97-CAE6C5C9E150" }, { "vulnerable": true, "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding": "11.9.0", "versionEndExcluding": "13.8.8", "matchCriteriaId": "E50A00D3-A0CA-4A2C-9863-DF3FDD03598F" }, { "vulnerable": true, "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding": "13.9.0", "versionEndExcluding": "13.9.6", "matchCriteriaId": "2A6892FA-6192-48DE-B3A6-E3992A95487D" }, { "vulnerable": true, "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding": "13.9.0", "versionEndExcluding": "13.9.6", "matchCriteriaId": "C38714A5-8AE4-432E-B67B-99F393E1D566" }, { "vulnerable": true, "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding": "13.10.0", "versionEndExcluding": "13.10.3", "matchCriteriaId": "AD03F460-6E1E-4504-B924-D416AF98744B" }, { "vulnerable": true, "criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding": "13.10.0", "versionEndExcluding": "13.10.3", "matchCriteriaId": "58904C4B-E763-4870-921D-65D6A7F6A0AF" } ] } ] } ], "references": [ { "url": "http://packetstormsecurity.com/files/164768/GitLab-Unauthenticated-Remote-ExifTool-Command-Injection.html", "source": "cve@gitlab.com", "tags": [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url": "http://packetstormsecurity.com/files/164994/GitLab-13.10.2-Remote-Code-Execution.html", "source": "cve@gitlab.com", "tags": [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url": "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22205.json", "source": "cve@gitlab.com", "tags": [ "Vendor Advisory" ] }, { "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/327121", "source": "cve@gitlab.com", "tags": [ "Broken Link" ] }, { "url": "https://hackerone.com/reports/1154542", "source": "cve@gitlab.com", "tags": [ "Permissions Required", "Third Party Advisory" ] }, { "url": "http://packetstormsecurity.com/files/164768/GitLab-Unauthenticated-Remote-ExifTool-Command-Injection.html", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url": "http://packetstormsecurity.com/files/164994/GitLab-13.10.2-Remote-Code-Execution.html", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url": "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22205.json", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ] }, { "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/327121", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Broken Link" ] }, { "url": "https://hackerone.com/reports/1154542", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Permissions Required", "Third Party Advisory" ] } ] }