CVE-2021-22205

CVE-2021-22205 Preauth RCE via exiftool on Gitlab CE/EE Summary of the CVE GitLab uses ExifTool to scan every tiff/jpeg/jpg file to remove any tags that are not whitelisted. But because ExifTool doesn't use file extensions to determine filetype but it rather uses the content of the file, which...

Gitlab-CVE-2021-22205

Unauthenticated RCE on Gitlab version -c Tested on version 13.10.1-ce.0...