CVEvulnerability

CVE-2021-22205

10.0 CRITICAL Known exploited Published 2021-04-23 Modified 2026-08-06 Official page ↗

CISA Known Exploited Vulnerability

GitLab Community and Enterprise Editions Remote Code Execution Vulnerability — GitLab Community and Enterprise Editions

GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.

Added to KEV
2021-11-03
Remediation due
2021-11-17
Ransomware use
Known
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2021-22205
Status
Analyzed
Published
2021-04-23
Last modified
2026-08-06
Assigner
[email protected]
CVSS 3.1 ([email protected])
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

Affected configurations

• gitlab gitlab (>= 11.9.0 < 13.8.8) • gitlab gitlab (>= 13.9.0 < 13.9.6) • gitlab gitlab (>= 13.10.0 < 13.10.3)

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

Referenced by CWE · observed example (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code weakness

References