CVE-2022-4335

Опубликовано: 27 янв. 2023

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host.

Ссылки

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4335.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/353018
Exploit
Issue Tracking
Vendor Advisory
https://hackerone.com/reports/1462437
Permissions Required
Third Party Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4335.json
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/353018
Exploit
Issue Tracking
Vendor Advisory
https://hackerone.com/reports/1462437
Permissions Required
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия до 15.4.6 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 15.5.0 (включая) до 15.5.5 (исключая)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Версия от 15.6 (включая) до 15.6.1 (исключая)

EPSS

Процентиль: 53%

0.00299

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVE-2022-4335

CVSS3: 4.3

ubuntu

около 3 лет назад

A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host.

CVE-2022-4335

CVSS3: 4.3

debian

около 3 лет назад

A blind SSRF vulnerability was identified in all versions of GitLab EE ...

GHSA-g3jp-2gfc-xjq6

CVSS3: 4.3

github

около 3 лет назад

A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host.

EPSS

Процентиль: 53%

0.00299

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-918