Known Exploited Vulnerabilities November 03, 2021 · CISA KEV Catalog

CVE-2021-22205: Git Lab Community and Enterprise Editions Remote Code Execution Vulnerability

GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2021-22205GitLab

Related

CVE-2026-97229: Git Lab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability Known Exploited Vulnerabilities · Oct 29, 2026

CVE-2026-85706: Git Lab Community Edition and Enterprise Edition Path Traversal Vulnerability Known Exploited Vulnerabilities · Sep 11, 2026

CVE-2021-22175: Git Lab Server-Side Request Forgery (SSRF) Vulnerability Known Exploited Vulnerabilities · Feb 18, 2026