CVE-2021-22205.md

CVE-2021-22205

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

POC

Reference

• http://packetstormsecurity.com/files/164768/GitLab-Unauthenticated-Remote-ExifTool-Command-Injection.html
• http://packetstormsecurity.com/files/164994/GitLab-13.10.2-Remote-Code-Execution.html

Github

• https://github.com/0x0021h/expbox
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/AkBanner/CVE-2021-22205
• https://github.com/Al1ex/CVE-2021-22205
• https://github.com/DIVD-NL/GitLab-cve-2021-22205-nse
• https://github.com/FDlucifer/firece-fish
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/Qclover/Gitlab_RCE_CVE_2021_22205
• https://github.com/Seals6/CVE-2021-22205
• https://github.com/SexyBeast233/SecBooks
• https://github.com/X1pe0/Automated-Gitlab-RCE
• https://github.com/XTeam-Wing/CVE-2021-22205
• https://github.com/ahmad4fifz/CVE-2021-22205
• https://github.com/antx-code/CVE-2021-22205
• https://github.com/binganao/vulns-2022
• https://github.com/c0okB/CVE-2021-22205
• https://github.com/devdanqtuan/CVE-2021-22205
• https://github.com/faisalfs10x/GitLab-CVE-2021-22205-scanner
• https://github.com/findneo/GitLab-preauth-RCE_CVE-2021-22205
• https://github.com/hanc00l/some_pocsuite
• https://github.com/hh-hunter/cve-2021-22205
• https://github.com/inspiringz/CVE-2021-22205
• https://github.com/jas502n/GitlabVer
• https://github.com/jusk9527/GobyPoc
• https://github.com/mr-r3bot/Gitlab-CVE-2021-22205
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/pizza-power/Golang-CVE-2021-22205-POC
• https://github.com/r0eXpeR/CVE-2021-22205
• https://github.com/runsel/GitLab-CVE-2021-22205-
• https://github.com/sanqiushu-ns/POC-scan
• https://github.com/shang159/CVE-2021-22205-getshell
• https://github.com/superfish9/pt
• https://github.com/whwlsfb/CVE-2021-22205
• https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-
• https://github.com/woods-sega/woodswiki