Community and Enterprise Editions vulnerabilities
1 published alerts for GitLab Community and Enterprise Editions.
Actively exploited (KEV)Ransomware
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
GitLab Community and Enterprise Editions is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-22205). GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.