CVE-2021-22214

This PoC exploits CVE-2021-22214, a GitLab SSRF vulnerability, by sending a crafted JSON payload to the '/api/v4/ci/lint' endpoint, triggering an outbound request to a controlled DNS host. The script checks the response for evidence of the SSRF by verifying if the DNS host appears in the error message.

This repository contains a functional Python script that exploits CVE-2021-22214, an unauthenticated SSRF vulnerability in GitLab's CI Lint API. The exploit sends a crafted request to the API endpoint, triggering an SSRF to a specified DNS host for verification.

The repository contains no exploit code or technical details about CVE-2021-22214, only social media links and promotional content. This is characteristic of a social engineering lure rather than a legitimate PoC.

This PoC exploits CVE-2021-22214, a GitLab SSRF vulnerability, by sending a crafted JSON payload to the CI lint API endpoint, triggering an outbound request to a specified DNS host for verification.