CVE-2021-39894

Опубликовано: 05 окт. 2021

Источник: debian

EPSS Низкий

Описание

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
gitlab	fixed	15.10.8+ds1-2		package

EPSS

Процентиль: 37%

0.00165

Низкий

Связанные уязвимости

CVE-2021-39894

CVSS3: 5.4

ubuntu

больше 4 лет назад

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks.

CVE-2021-39894

CVSS3: 5.4

nvd

больше 4 лет назад

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks.

GHSA-h93h-vj2c-pxf9

github

почти 4 года назад

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks.

EPSS

Процентиль: 37%

0.00165

Низкий