← voltar
CVE-2021-22205

CVE-2021-22205

CVSS 10 CRITICALEPSS 99.7%● KEVCWE-94
Em resumo

O GitLab não validava corretamente arquivos de imagem enviados pelos usuários, permitindo que atacantes executassem comandos arbitrários no servidor remoto. Isso é crítico porque dá aos atacantes controle total sobre a instância do GitLab afetada.

Detalhe técnico

Um analisador de arquivos no GitLab CE/EE (versões 11.9+) valida insuficientemente entradas de arquivos de imagem antes do processamento, permitindo execução remota de código não autenticada por meio de uploads de imagem manipulados. A vulnerabilidade resulta de sanitização inadequada de entrada no pipeline de tratamento de imagens, permitindo injeção de código executável com privilégios de processo do GitLab.

Resumo gerado e traduzido por IA a partir da descrição oficial.
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
GitLab · GitLab
PoCs públicas encontradas — 28
githubgithub.com/Al1ex/CVE-2021-22205★ 284githubgithub.com/inspiringz/CVE-2021-22205★ 238githubgithub.com/mr-r3bot/Gitlab-CVE-2021-22205★ 181githubgithub.com/XTeam-Wing/CVE-2021-22205★ 86githubgithub.com/r0eXpeR/CVE-2021-22205★ 69githubgithub.com/whwlsfb/CVE-2021-22205★ 23githubgithub.com/c0okB/CVE-2021-22205★ 13githubgithub.com/keven1z/CVE-2021-22205★ 12githubgithub.com/ZZ-SOCMAP/CVE-2021-22205★ 7githubgithub.com/faisalfs10x/GitLab-CVE-2021-22205-scanner★ 6githubgithub.com/runsel/GitLab-CVE-2021-22205-★ 3githubgithub.com/shang159/CVE-2021-22205-getshell★ 3githubgithub.com/pizza-power/Golang-CVE-2021-22205-POC★ 3githubgithub.com/findneo/GitLab-preauth-RCE_CVE-2021-22205★ 2githubgithub.com/DIVD-NL/GitLab-cve-2021-22205-nse★ 1githubgithub.com/NukingDragons/gitlab-cve-2021-22205★ 1githubgithub.com/w0x68y/Gitlab-CVE-2021-22205★ 1githubgithub.com/hh-hunter/cve-2021-22205★ 0githubgithub.com/ccordeiro/CVE-2021-22205★ 0githubgithub.com/devdanqtuan/CVE-2021-22205★ 0githubgithub.com/cc3305/CVE-2021-22205★ 0githubgithub.com/hhhotdrink/CVE-2021-22205★ 0githubgithub.com/sei-fish/CVE-2021-22205★ 0githubgithub.com/overgrowncarrot1/DejaVu-CVE-2021-22205★ 0githubgithub.com/Hikikan/CVE-2021-22205★ 0exploitdbwww.exploit-db.com/exploits/50532não verificadocve_referencepacketstormsecurity.com/files/164994/GitLab-13.10.2-Remote-Code-Execution.htmlnão verificadocve_referencepacketstormsecurity.com/files/164768/GitLab-Unauthenticated-Remote-ExifTool-Command-Injection.htmlnão verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://packetstormsecurity.com/files/164768/GitLab-Unauthenticated-Remote-ExifTool-Command-Injection.htmlhttp://packetstormsecurity.com/files/164994/GitLab-13.10.2-Remote-Code-Execution.htmlhttps://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22205.jsonhttps://gitlab.com/gitlab-org/gitlab/-/issues/327121https://hackerone.com/reports/1154542https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22205