Описание
GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gitlab | fixed | 10.5.6+dfsg-1 | package |
Примечания
https://about.gitlab.com/2018/03/20/critical-security-release-gitlab-10-dot-5-dot-6-released/
EPSS
Процентиль: 39%
0.00172
Низкий
Связанные уязвимости
CVSS3: 6.5
ubuntu
около 7 лет назад
GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component.
CVSS3: 6.5
nvd
около 7 лет назад
GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component.
CVSS3: 6.5
github
около 3 лет назад
GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component.
EPSS
Процентиль: 39%
0.00172
Низкий