CVE-2021-22214 Scanner
Detects 'Server-Side Request Forgery (SSRF)' vulnerability in GitLab affects v. from 10.5 to 13.10.5,from 13.11 to 13.11.5, from 13.12 to 13.12.2.
Used 3.3k times · 3.4k assets checked · domain, ipv4, subdomain
CVE
CVE-2021-22214
6.8
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited
Attack Vector
Network
Privileges Req.
None
User Interaction
None
gitlab
Updated Oct 24, 2026View on NVD →
S4E scanner
CVE history: gitlab
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →