CVE-2021-39935
GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
CVSS
—
Sem CVSS
EPSS
36.1%
p98
KEV
SIM
3 de fev. de 2026
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
GitLab / Community and Enterprise Editions
Vulnerabilidade
GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
Adicionado ao KEV
3 de fev. de 2026
Corrigir até
24 de fev. de 2026
Uso conhecido em ransomware
Não
Descrição resumida
GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side Requests via the CI Lint API.
Ação necessária
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notas
https://about.gitlab.com/releases/2021/12/06/security-release-gitlab-14-5-2-released/ ; https://nvd.nist.gov/vuln/detail/CVE-2021-39935