CVE-2021-22205
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
CVSS
—
Sin CVSS
EPSS
99.7%
p100
KEV
SÍ
3 nov 2021
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Producto
GitLab / Community and Enterprise Editions
Vulnerabilidad
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
Añadido a KEV
3 nov 2021
Remediar antes de
17 nov 2021
Uso conocido en ransomware
Sí
Descripción resumida
GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2021-22205