Server side request forgery (ssrf)

2019-04-1717:29:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.4%

JSON

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows SSRF.

CPENameOperatorVersion
gitlabge11.8.0
gitlablt11.8.1
gitlabge11.8.0
gitlablt11.8.1
gitlablt11.6.10
gitlabge11.7.0
gitlablt11.7.6
gitlablt11.6.10
gitlabge11.7.0
gitlablt11.7.6

Name	Operator	Version
gitlab	ge	11.8.0
gitlab	lt	11.8.1
gitlab	ge	11.8.0
gitlab	lt	11.8.1
gitlab	lt	11.6.10
gitlab	ge	11.7.0
gitlab	lt	11.7.6
gitlab	lt	11.6.10
gitlab	ge	11.7.0
gitlab	lt	11.7.6

References

about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/

about.gitlab.com/blog/categories/releases/

gitlab.com/gitlab-org/gitlab-ce/issues/55468