CVE-2021-22179: GitLab

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature.

Affected products

• GitLab GitLab: from 12.2.0, before 13.6.6 (fixed in 13.6.6); from 13.7.0, before 13.7.6 (fixed in 13.7.6); from 13.8.0, before 13.8.2 (fixed in 13.8.2)

Published 2021-03-24. Last modified 2026-06-17.