Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-22hj-9cx7-p2hw

Опубликовано: 14 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

EPSS

Процентиль: 96%
0.25967
Средний

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 6.8
ubuntu
больше 3 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

CVSS3: 6.8
nvd
больше 3 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

CVSS3: 6.8
debian
больше 3 лет назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

CVSS3: 7.5
fstec
около 4 лет назад

Уязвимость компонента CI Lint API программной платформы на базе git для совместной работы над кодом GitLab, позволяющая нарушителю осуществить SSRF-атаку

EPSS

Процентиль: 96%
0.25967
Средний

Дефекты

CWE-918