Files
CVEs-PoC/2021/CVE-2021-22197.md
2025-09-29 21:09:30 +02:00

20 lines
976 B
Markdown

### [CVE-2021-22197](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22197)
![](https://img.shields.io/static/v1?label=Product&message=GitLab&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3E%3D10.6%2C%20%3C13.8.7%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3E%3D13.10%2C%20%3C13.10.1%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3E%3D13.9%2C%20%3C13.9.5%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Uncontrolled%20resource%20consumption%20in%20GitLab&color=brightgreen)
### Description
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated user with specific rights access a MR having source and target branch pointing to each other
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/0xfschott/CVE-search