Lucene search

K
osvGoogleOSV:CVE-2021-22175
HistoryJun 11, 2021 - 4:15 p.m.

CVE-2021-22175

2021-06-1116:15:09
Google
osv.dev
5

AI Score

6.6

Confidence

Low

EPSS

0.008

Percentile

82.2%

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is disabled

AI Score

6.6

Confidence

Low

EPSS

0.008

Percentile

82.2%