Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-22hj-9cx7-p2hw

Опубликовано: 14 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

EPSS

Процентиль: 96%
0.29183
Средний

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 6.8
ubuntu
почти 4 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

CVSS3: 6.8
nvd
почти 4 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

CVSS3: 6.8
debian
почти 4 года назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 7.5
fstec
больше 4 лет назад

Уязвимость компонента CI Lint API программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю осуществить SSRF-атаку

EPSS

Процентиль: 96%
0.29183
Средний

Дефекты

CWE-918