Lucene search
GitLab: GitLab::UrlBlocker validation bypass leading to full Server Side Request Forgery
The `GitLab::UrlBlocker` IP address validation methods suffer from a Time of Check to Time of Use (ToCToU) vulnerability allowing authenticated users to send GET and POST HTTP requests to arbitrary hosts, including localhost, cloud metadata services, and local network
Show more
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo17 Apr 2019 09:18Current
6.9Medium risk
Vulners AI Score6.9