CVE-2022-0425: GitLab

High severity, CVSS 7.6. EPSS: 0.6% chance of exploitation in the next 30 days.

A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery (SSRF) attacks.

Affected products

• GitLab GitLab: from 7.9.0, up to and including 14.7.1

Published 2022-04-01. Last modified 2026-06-17.