CyberSec.Space Logo
CVEブラウザに戻る

CVE-2021-39935

🔥 Known Exploited (CISA KEV)MEDIUM
6.8
CVSS Severity Score
EPSS Score57.5320%
EPSS Percentile88.57th
Published2021-12-13
Last Modified2026-02-04
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

Affected Platforms (CPE)

📦
Gitlab

Gitlab

>= 10.5.0 and < 14.3.6>= 14.4.0 and < 14.4.4>= 14.5.0 and < 14.5.2

References & Advisories

🔗 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39935.json
🔗 https://gitlab.com/gitlab-org/gitlab/-/issues/346187
🔗 https://hackerone.com/reports/1236965
🔗 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39935.json
🔗 https://gitlab.com/gitlab-org/gitlab/-/issues/346187
🔗 https://hackerone.com/reports/1236965
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-39935

関連するセキュリティ記事

デイリー・グローバル・サイバー脅威インテリジェンス・ダイジェスト｜2026年7月30日

本日の脅威情報では、Ruby on Rails CVE-2026-66066の任意ファイル読み取り、Gitea CVE-2026-60004のGit Hookコマンド実行、Minnesota州水道システムへの協調攻撃、Ruflo MCP Bridge RCE、Firefox CVE-2026-10702を解説します。

2026-07-30

デイリー・グローバル・サイバー脅威インテリジェンス・ダイジェスト｜2026年7月21日

VMware vCenter、F5 BIG-IP、および GitLab における重大な脆弱性アドバイザリの技術分析と、インフラ・医療機関を対象とした最新セキュリティ対策ガイド。

2026-07-21

関連する脆弱性情報

CVE-2026-63365.3

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...

CVE-2026-62678.5

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 befo...

CVE-2026-46724.3

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...

CVE-2026-30934.7

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...