GitLab 10.5 < 13.10.5 / 13.11 < 13.11.5 / 13.12 < 13.12.2 (CVE-2021-22214)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows:

• When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited (CVE-2021-22214)

Note that Nessus has not tested for this issue but has instead relied only on the application’s self-reported version number.