Exploitation Summary
EIP tracks 3 public exploits for CVE-2021-22192. PoCs published by EXP-Docs, PetrusViet.
AI-analyzed exploit summary This repository provides a functional exploit for CVE-2021-22192, an unauthenticated RCE vulnerability in GitLab EE 13.2.0. It includes a Docker-based test environment, a step-by-step exploitation guide, and a payload delivery mechanism via GitLab's wiki markup rendering feature.
Description
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server.
Exploits (3)
This repository provides a functional exploit for CVE-2021-22192, an unauthenticated RCE vulnerability in GitLab EE 13.2.0. It includes a Docker-based test environment, a step-by-step exploitation guide, and a payload delivery mechanism via GitLab's wiki markup rendering feature.
This is a detailed technical analysis of CVE-2021-22192, focusing on the vulnerability in GitLab's use of the kramdown gem. It explains the root cause, patch analysis, and exploitation attempts, including the use of the Rouge formatter and potential RCE via the Hoosegow class.
This repository provides a functional exploit for CVE-2021-22192, a remote code execution (RCE) vulnerability in GitLab EE 13.2.0. The exploit leverages a path traversal and command injection flaw in the Kramdown parser to execute arbitrary Ruby code.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H