When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - When requests to the internal network for webhooks are enabled, a server-side request forgery     vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an     unauthenticated attacker even on a GitLab instance where registration is limited (CVE-2021-22214)

Note that Nessus relies on the presence of the package as reported by the vendor.

GitLab CE/EE versions starting from 10.5 before 13.10.5, 13.11 before 13.11.5 and 13.12 before 13.12.2 suffer from a server-side request forgery vulnerability when requests to the internal network for webhooks are enabled. An unauthenticated attacker could leverage this issue to make the target server perform blind network requests to arbitrary hosts.

The version of GitLab installed on the remote host is affected by a vulnerability, as follows:

  - When requests to the internal network for webhooks are enabled, a server-side request forgery     vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an     unauthenticated attacker even on a GitLab instance where registration is limited (CVE-2021-22214)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
256156	Linux Distros Unpatched Vulnerability : CVE-2021-22214	Nessus	Misc.	high
113091	GitLab 10.5.x < 13.10.5 / 13.11.x < 13.11.5 / 13.12.x < 13.12.2 Server-Side Request Forgery	Web App Scanning	Component Vulnerability	high
152483	GitLab 10.5 < 13.10.5 / 13.11 < 13.11.5 / 13.12 < 13.12.2 (CVE-2021-22214)	Nessus	Misc.	high

Detections

Analytics

CVE-2021-22214

high

Tenable Plugins

high

high

high