CVE-2022-0425

Опубликовано: 01 апр. 2022

Источник: nvd

CVSS3: 5.4

CVSS3: 7.6

CVSS2: 6.5

EPSS Низкий

Описание

A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery (SSRF) attacks.

Ссылки

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0425.json
Third Party Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/22350
Broken Link
Issue Tracking
Third Party Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0425.json
Third Party Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/22350
Broken Link
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

Версия от 7.9.0 (включая) до 14.7.1 (включая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 7.9.0 (включая) до 14.7.1 (включая)

EPSS

Процентиль: 37%

0.00151

Низкий

5.4 Medium

CVSS3

7.6 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-918

Связанные уязвимости

CVE-2022-0425

CVSS3: 5.4

ubuntu

больше 3 лет назад

A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery (SSRF) attacks.

GHSA-rfc5-457g-gpqm

CVSS3: 7.6

github

больше 3 лет назад

A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery (SSRF) attacks.

EPSS

Процентиль: 37%

0.00151

Низкий

5.4 Medium

CVSS3

7.6 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-918