CVE-2021-22205 PoC — GitLab 代码注入漏洞

Source

https://github.com/pizza-power/Golang-CVE-2021-22205-POC

Associated Vulnerability

Title: GitLab 代码注入漏洞 (CVE-2021-22205)
Description:An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

Description

A CVE-2021-22205 Gitlab RCE POC written in Golang

Readme

# Golang-CVE-2021-22205-POC
A bare bones CVE-2021-22205 Gitlab RCE POC written in Golang which affects Gitlab CE/EE < 13.10.3 Gitlab CE/EE < 13.9.6 Gitlab CE/EE < 13.8.8.

I've been wanting to learn Golang for a while. I decided to write a POC for CVE-2021-22205 in Golang to help familiarize myself with the language. Please disregard what I am assuming is horribly written code.

Usage: ```go run CVE-2021-22205.go -t http://127.0.0.1:8080 -c "echo pizza > /tmp/pizza.txt"```
Where the t flag specifies the target Gitlab instance and the c flag is the command you want to run.

The script is setup to use http://localhost:9090 as a proxy. You'll need to delete that, if you don't want to use a proxy.

A vulnerable docker setup can be found here:
https://github.com/vulhub/vulhub/tree/master/gitlab/CVE-2021-22205

CVE Finder Writeup:
https://devcraft.io/2021/05/04/exiftool-arbitrary-code-execution-cve-2021-22204.html

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →