Skip to content

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

CVE-2021-22214 — Gitlab CI Lint API未授权 SSRF漏洞 CVE-2021-22214 | Kitploit

GitHub/zz-socmap/cve-2021-22214

Vulnerability Analysis Exploitation Web Application Exploitation Information Gathering Penetration Testing

zz-socmap/cve-2021-22214

CVE-2021-22214

Gitlab CI Lint API未授权 SSRF漏洞 CVE-2021-22214

View Repository

10514 years ago

Most Popular

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Share

CVE-2021-22214

** Description - POC for CVE-2021-22214: Gitlab CI Lint API未授权 SSRF漏洞 - create by antx at 2021-11-01.

** Detail - When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited.

** CVE Severity - attackComplexity: HIGH - attackVector: NETWORK - availabilityImpact: NONE - confidentialityImpact: HIGH - integrityImpact: NONE - privilegesRequired: NONE - scope: CHANGED - userInteraction: NONE - version: 3.1 - baseScore: 6.7 - baseSeverity: MEDIUM

** Affect - Gitlab >=10.5, <13.10.5 - Gitlab >=13.11, <13.11.5 - Gitlab >=13.12, <13.12.2

** POC - [[./CVE-2021-22214.py][Python-Poc]]

** Reference - POC - [[https://github.com/r0ckysec/CVE-2021-22214][r0ckysec/CVE-2021-22214]] - CVE - [[https://github.com/CVEProject/cvelist/blob/master/2021/22xxx/CVE-2021-22214.json][CVE-2021-22214]]