CVE-2023-2825

CVE-2023-2825 On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug...

gitlab-ssrf

GitLab SSRF This repository is a reproduction of CVE-2018-19571, and how when combined with a CRLF injection exploit, can lead to remote code execution RCE. CVE Details CVE-2018-19571 GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE /tmp/1.txt" batch scan python3...

CVE-2023-2825-PoC

CVE-2023-2825-PoC Proof-of-concept for CVE-2023-2825, an arbitrary file read vulnerability in GitLab CE/EE 16.0.0. The script logs in with a valid GitLab account, creates the required public nested group structure, creates a public project, uploads an attachment, and uses the vulnerable upload pa...

CVE-2023-2825

CVE-2023-2825 - GitLab CE/EE 16.0.0 Arbitrary File Read via Path Traversal On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated user...

CVE-2021-22205

CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...

CVE-2021-22214

CVE-2021-22214 Description - POC for CVE-2021-22214: Gitlab CI Lint API未授权 SSRF漏洞 - create by antx at 2021-11-01. Detail - When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was...

CVE-2021-22205

CVE-2021-22205 GitLab fails to properly verify image files passed to the file parser, leading to command execution. An attacker can craft malicious requests to exploit this vulnerability and execute arbitrary commands on the target system, ultimately taking control of the GitLab server. Since mos...

CVE-2021-22205

CVE-2021-22205 Affected versions: Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 Usage python3 CVE-2021-22205.py target "curl \whoami.dnslog" Get csrf-token: Obtain the csrf-token via /users/signin, then use the previous CVE-2021-22205 POC to construct and execute an unauthenticated...

CVE-2023-7028

CVE-2023-7028 Gitlab CVE-2023-7028: Account Takeover via Password Reset without user interactions A critical vulnerability in GitLab CE/EE CVE-2023-7028 can be easily exploited by attackers to reset GitLab user account passwords. While also vulnerable, users who have two-factor authentication...

gitlab_rce_cve-2022-2884

gitlabrcecve-2022-2884 This is a Python3 program that exploits GitLab authenticated RCE vulnerability known as CVE-2022-2884. DISCLAIMER This tool is intended for security engineers and appsec people for security assessments. Please use this tool responsibly. I do not take responsibility for the...

GitLabSniper

GitLabSniper CVE-2026-85706 — GitLab CE/EE unauthenticated arbitrary file read detect · public project enum · loot · interactive shell · subfinder/httpx pipeline Author: Yunus Emre Öztaş mitsec X: x.com/ynsmroztas GitHub: github.com/ynsmroztas Site: ynsmroztas.github.io Mail: [email protected]...

GitLab-CVE-2021-22205-

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Affected Version Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2022-2992

CVE-2022-2992 Authenticated Remote Command Execution in Gitlab via GitHub import. A vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve...

CVE-2022-2992

CVE-2022-2992 Authenticated Remote Command Execution in Gitlab via GitHub import. A vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve...

CVE-2023-7028

CVE-2023-7028 An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be...

cve-2026-85706

cve-2026-85706 Unauthenticated arbitrary local file read in GitLab CE/EE. Affects 18.7–19.1.7, 19.2.0–19.2.5, 19.3.0–19.3.1. Fixed in 19.1.8 / 19.2.6 / 19.3.2 2026-09-10. CVSS 10.0, reportedly exploited in the wild. Original report by s3ntago and this repo is just my writeup + PoC. disclaimer Thi...

gitlab-exploit

gitlab-exploit GitLab CVE-2023-7028 GitLab CVE-2023-7028 The vulnerability was caused by a bug in how GitLab handled email verification during password reset. An attacker could provide two email addresses during a password reset request, and the reset code would be sent to both addresses. This...

CVE-2022-1162

CVE-2022-1162 A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML in GitLab CE/EE versions 14.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowing attackers to potentially take over accounts. Exploit: New Gitlab Accounts...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...