Описание
GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gitlab | not-affected | package |
Примечания
https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/
Связанные уязвимости
CVSS3: 9.8
nvd
больше 5 лет назад
GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk.
github
около 3 лет назад
GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk.