Описание
An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
Ссылки
- ExploitVendor Advisory
- Third Party Advisory
- Vendor Advisory
- ExploitVendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Одно из
EPSS
3.5 Low
CVSS3
4 Medium
CVSS2
Дефекты
Связанные уязвимости
An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
An input validation problem was discovered in the GitHub service integ ...
An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
EPSS
3.5 Low
CVSS3
4 Medium
CVSS2