CVE-2021-22214: GitLab

High severity, CVSS 8.6. EPSS: 27.8% chance of exploitation in the next 30 days.

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited

Affected products

• GitLab GitLab: from 10.5, before 13.10.5 (fixed in 13.10.5); from 13.11, before 13.11.5 (fixed in 13.11.5); from 13.12, before 13.12.2 (fixed in 13.12.2)

Published 2021-06-08. Last modified 2026-06-17.