Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j42x-rxgc-89xm

Опубликовано: 12 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.5

Описание

An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to make unintended internal requests through proxy environments by injecting crafted sequences.

An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to make unintended internal requests through proxy environments by injecting crafted sequences.

EPSS

Процентиль: 47%
0.00645
Низкий

8.5 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 8.5
nvd
11 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to make unintended internal requests through proxy environments by injecting crafted sequences.

CVSS3: 8.5
debian
11 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

CVSS3: 8.8
fstec
11 месяцев назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab CE/EE, связанная с недостаточной проверкой запросов на стороне сервера, позволяющая нарушителю осуществить SSRF-атаку

EPSS

Процентиль: 47%
0.00645
Низкий

8.5 High

CVSS3

Дефекты

CWE-918