Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-4201
HistoryJan 27, 2023 - 10:15 p.m.

Server side request forgery (ssrf)

2023-01-2722:15:00
PRIOn knowledge base
www.prio-n.com
5
ssrf
gitlab
ce/ee
vulnerable
version 11.3
version 15.6.1

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.4%

A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when configuring a malicious GitLab Runner.

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.4%