Exploitation Summary
EIP tracks 2 public exploits for CVE-2021-22201. PoCs published by c2at3, exp1orer.
AI-analyzed exploit summary This repository contains a functional Metasploit module for CVE-2021-22201, an arbitrary file read vulnerability in GitLab CE/EE. The exploit leverages a crafted import file to read files on the server, specifically targeting GitLab versions >=13.9, <13.9.5 and >=13.10, <13.10.1.
Description
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server.
Exploits (2)
This repository contains a functional Metasploit module for CVE-2021-22201, an arbitrary file read vulnerability in GitLab CE/EE. The exploit leverages a crafted import file to read files on the server, specifically targeting GitLab versions >=13.9, <13.9.5 and >=13.10, <13.10.1.
This repository contains a functional exploit for CVE-2021-22201, an arbitrary file read vulnerability in GitLab. The exploit automates the process of logging in, creating a project, and exporting it to trigger the vulnerability.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N