HTTP: GitLab Enterprise Server Side Request Forgery
This signature detects attempts to exploit a known vulnerability against GitLab Enterprise. A successful attack can lead to command injection and arbitrary code execution.
Extended Description
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited
Affected Products
Gitlab gitlab
References
CVE: CVE-2021-22214
Short Name
HTTP:CTS:GTLB-ENT-SSRF
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2021-22214 Enterprise Forgery GitLab Request Server Side
Release Date
08/03/2023
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3693
False Positive
Unknown
Vendors
Gitlab