Описание
GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gitlab | fixed | 11.3.11+dfsg-1 | package |
Примечания
https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
EPSS
Процентиль: 97%
0.33211
Средний
Связанные уязвимости
CVSS3: 7.7
ubuntu
почти 6 лет назад
GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks.
CVSS3: 7.7
nvd
почти 6 лет назад
GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks.
CVSS3: 7.7
github
около 3 лет назад
GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks.
EPSS
Процентиль: 97%
0.33211
Средний