CVE-2021-22246
published 2021-08-20CVE-2021-22246: A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook feature could be abused to perform denial of service attacks.
PriorityP433medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
1.33%
67.7th percentile
A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook feature could be abused to perform denial of service attacks.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 15.10.8+ds1-2 (sid) | gitlab 15.10.8+ds1-2 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 13.12.0 < 13.12.6 | 13.12.6 |
| gitlab | gitlab | >= 14.0.0 < 14.0.2 | 14.0.2 |
| gitlab | gitlab | >= 2.0.0 < 13.11.6 | 13.11.6 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
osv6.5MEDIUM
vendor_debian7.7HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GitLab
CVE-2021-22246: A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook feature could be abused to perform denial of service
vendor_gitlab·2021-08-20·CVSS 7.7
CVE-2021-22246 [HIGH] CWE-770 CVE-2021-22246: A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook feature could be abused to perform denial of service
CVE-2021-22246: A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook feature could be abused to perform denial of service attacks.
Debian
CVE-2021-22246: gitlab - A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11....
vendor_debian·2021·CVSS 7.7
CVE-2021-22246 [HIGH] CVE-2021-22246: gitlab - A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11....
A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook feature could be abused to perform denial of service attacks.
Scope: local
sid: resolved (fixed in 15.10.8+ds1-2)
GHSA
GHSA-q6jf-84qm-cj59: A vulnerability was discovered in GitLab versions before 14
ghsa_unreviewed·2022-05-24
CVE-2021-22246 [MEDIUM] CWE-770 GHSA-q6jf-84qm-cj59: A vulnerability was discovered in GitLab versions before 14
A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook feature could be abused to perform denial of service attacks.
OSV
CVE-2021-22246: A vulnerability was discovered in GitLab versions before 14
osv·2021-08-20·CVSS 6.5
CVE-2021-22246 [MEDIUM] CVE-2021-22246: A vulnerability was discovered in GitLab versions before 14
A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook feature could be abused to perform denial of service attacks.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22246.jsonhttps://gitlab.com/gitlab-org/gitlab/-/issues/280633https://hackerone.com/reports/1029269https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22246.jsonhttps://gitlab.com/gitlab-org/gitlab/-/issues/280633https://hackerone.com/reports/1029269
2021-08-20
Published