Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9ppv-xcv2-vhqr

Опубликовано: 28 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when configuring a malicious GitLab Runner.

A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when configuring a malicious GitLab Runner.

EPSS

Процентиль: 39%
0.00177
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 3.5
ubuntu
около 3 лет назад

A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when configuring a malicious GitLab Runner.

CVSS3: 3.5
nvd
около 3 лет назад

A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when configuring a malicious GitLab Runner.

CVSS3: 3.5
debian
около 3 лет назад

A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, ...

EPSS

Процентиль: 39%
0.00177
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-918