返回 CVE 浏览器

CVE-2021-39935

🔥 Known Exploited (CISA KEV)MEDIUM

6.8

CVSS Severity Score

EPSS Score57.5320%

EPSS Percentile88.57th

Published2021-12-13

Last Modified2026-02-04

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

Affected Platforms (CPE)

📦

Gitlab

Gitlab

>= 10.5.0 and < 14.3.6>= 14.4.0 and < 14.4.4>= 14.5.0 and < 14.5.2

References & Advisories

🔗 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39935.json

🔗 https://gitlab.com/gitlab-org/gitlab/-/issues/346187

🔗 https://hackerone.com/reports/1236965

🔗 https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39935.json

🔗 https://gitlab.com/gitlab-org/gitlab/-/issues/346187

🔗 https://hackerone.com/reports/1236965

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-39935

相關資安分析文章

每日全球网络威胁情报摘要｜2026 年 7 月 30 日

本期威胁情报聚焦 Ruby on Rails CVE-2026-66066 任意文件读取、Gitea CVE-2026-60004 Git Hook 命令执行、Minnesota 供水系统协调式攻击、Ruflo MCP Bridge RCE，以及 Firefox CVE-2026-10702。

每日全球网络威胁情报摘要｜2026 年 7 月 21 日

本期威胁情报分析 VMware vCenter、F5 BIG-IP 与 GitLab 关键漏洞安全修补警讯，同时汇总最新医疗与关键基础设施平台遭勒索软件攻击之防御防范措施。

相关漏洞威胁

CVE-2026-63365.3

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...

CVE-2026-62678.5

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 befo...

CVE-2026-46724.3

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...

CVE-2026-30934.7

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before...