Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hcx-gvx4-r4rp

Опубликовано: 05 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 where a blind SSRF attack through the repository mirroring feature was possible.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 where a blind SSRF attack through the repository mirroring feature was possible.

EPSS

Процентиль: 55%
0.00325
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 3.7
ubuntu
почти 4 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 where a blind SSRF attack through the repository mirroring feature was possible.

CVSS3: 3.7
nvd
почти 4 года назад

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 where a blind SSRF attack through the repository mirroring feature was possible.

CVSS3: 3.7
debian
почти 4 года назад

An issue has been discovered in GitLab CE/EE affecting all versions st ...

EPSS

Процентиль: 55%
0.00325
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-918