Back to CVE Browser

CVE-2021-39935

🔥 Known Exploited (CISA KEV)MEDIUM

6.8

CVSS Severity Score

EPSS Score57.5320%

EPSS Percentile88.57th

Published2021-12-13

Last Modified2026-02-04

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

Affected Platforms (CPE)

📦

Gitlab

Gitlab

>= 10.5.0 and < 14.3.6>= 14.4.0 and < 14.4.4>= 14.5.0 and < 14.5.2

References & Advisories

🔗 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39935.json

🔗 https://gitlab.com/gitlab-org/gitlab/-/issues/346187

🔗 https://hackerone.com/reports/1236965

🔗 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39935.json

🔗 https://gitlab.com/gitlab-org/gitlab/-/issues/346187

🔗 https://hackerone.com/reports/1236965

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-39935

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 30, 2026

Today’s threat intelligence covers Ruby on Rails CVE-2026-66066 arbitrary file read, Gitea CVE-2026-60004 Git hook command execution, coordinated attacks on Minnesota water systems, Ruflo MCP Bridge RCE, and Firefox CVE-2026-10702.

Daily Global Cyber Threat Intelligence Digest — July 21, 2026

Comprehensive breakdown of critical vulnerability advisories across VMware vCenter, F5 BIG-IP, and GitLab platforms, alongside threat actor reconnaissance trends and ransomware response strategies.

Related Vulnerabilities

CVE-2026-63365.3

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...

CVE-2026-62678.5

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 befo...

CVE-2026-46724.3

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...

CVE-2026-30934.7

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...