CVE-2021-22205

Related Files

GitLab 13.10.2 Remote Code Execution

Posted Nov 17, 2021

Authored by Jacob Baines

GitLab version 13.10.2 remote code execution exploit that provides a reverse shell.

tags | exploit, remote, shell, code execution

advisories | CVE-2021-22204, CVE-2021-22205

SHA-256 | a3816f4a73b68abc9aa497e0982428e2bde3d7b0a005094907ca8484d9f39f60

Download | Favorite | View

GitLab Unauthenticated Remote ExifTool Command Injection

Posted Nov 4, 2021

Authored by William Bowling, jbaines-r7 | Site metasploit.com

This Metasploit module exploits an unauthenticated file upload and command injection vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). The patched versions are 13.10.3, 13.9.6, and 13.8.8. Exploitation will result in command execution as the git user.

tags | exploit, file upload

advisories | CVE-2021-22204, CVE-2021-22205

SHA-256 | 674d3772ec48b70f0ba624c93a36ffde9a6d313b18359aa19702fc270257ff56

Download | Favorite | View