CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0CVE-2021-22169
https://notcve.org/view.php?id=CVE-2021-22169
An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages. Se identificó un problema en GitLab EE versiones 13.4 o posteriores, que filtró la dirección IP interna por medio de mensajes de error • https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22169.json https://gitlab.com/gitlab-org/gitlab/-/issues/289930 • CWE-209: Generation of Error Message Containing Sensitive Information •
CVSS: 5.0EPSS: 0%CPEs: 6EXPL: 1CVE-2021-22178
https://notcve.org/view.php?id=CVE-2021-22178
An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack through the Prometheus integration. Se ha detectado un problema en GitLab que afecta a todas las versiones a partir de 13.2. Gitlab era vulnerable a un ataque de tipo SRRF por medio de la integración de Prometheus • https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22178.json https://gitlab.com/gitlab-org/gitlab/-/issues/284819 https://hackerone.com/reports/1037411 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 3.5EPSS: 0%CPEs: 6EXPL: 2CVE-2021-22193
https://notcve.org/view.php?id=CVE-2021-22193
An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a private group was able to validate the use of a specific name for private project. Se ha detectado un problema en GitLab que afecta a todas las versiones a partir de 7.1. Un miembro de un grupo privado pudo ser capaz de comprobar el uso de un nombre específico para un proyecto privado • https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22193.json https://gitlab.com/gitlab-org/gitlab/-/issues/12560 https://hackerone.com/reports/605608 • CWE-209: Generation of Error Message Containing Sensitive Information •
CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0CVE-2021-22179
https://notcve.org/view.php?id=CVE-2021-22179
A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature. Se detectó una vulnerabilidad en GitLab versiones anteriores a 12.2. GitLab era vulnerable a un ataque de tipo SSRF por medio de la funcionalidad Outbound Requests • https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22179.json https://gitlab.com/gitlab-org/gitlab/-/issues/293733 https://hackerone.com/reports/1055816 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0CVE-2021-22176
https://notcve.org/view.php?id=CVE-2021-22176
An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests Se ha detectado un problema en GitLab que afecta a todas las versiones a partir de 3.0.1. El control de acceso inapropiado permite a miembros del proyecto degradados acceder a los detalles de las peticiones de fusión creadas • https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22176.json https://gitlab.com/gitlab-org/gitlab/-/issues/243491 https://hackerone.com/reports/962604 • CWE-863: Incorrect Authorization •