CVE-2021-22201 PoC — GitLab 安全漏洞

Source

https://github.com/exp1orer/CVE-2021-22201

Associated Vulnerability

Title: GitLab 安全漏洞 (CVE-2021-22201)
Description:An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server.

Description

CVE-2021–22201 Arbitrary file read on Gitlab

Readme

# CVE-2021-22201
CVE-2021–22201 Arbitrary file read on Gitlab 

13.9.0 <= Gitlab < 13.9.5

## Usage

**python CVE-2021-22201.py url username password**

![](https://raw.githubusercontent.com/exp1orer/CVE-2021-22201/main/edf814bc-cc66-11eb-9332-a683e7be0e99.png)

## 参考

[CVE-2021–22201: Arbitrary file read on Gitlab | by Son Nguy3n | Jun, 2021 | tradahacking](https://tradahacking.vn/cve-2021-22201-arbitrary-file-read-on-gitlab-d84d77cd83e3)

[Project import/export API | GitLab](https://docs.gitlab.com/ee/api/project_import_export.html#import-status)

[#1132378 Arbitrary file read during project import](https://hackerone.com/reports/1132378)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →