Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h93h-vj2c-pxf9

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks.

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks.

EPSS

Процентиль: 38%
0.00165
Низкий

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 5.4
ubuntu
больше 4 лет назад

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks.

CVSS3: 5.4
nvd
больше 4 лет назад

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks.

CVSS3: 5.4
debian
больше 4 лет назад

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vul ...

EPSS

Процентиль: 38%
0.00165
Низкий

Дефекты

CWE-918