PT-2019-9854
CVE-2018-19571
·
تاريخ النشر
2019-07-10
·
تاريخ التحديث
2023-03-01
الوصف من
CVSS 3.1
7.7
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 8.18 up to 11.3.10
GitLab CE/EE versions 11.4 up to 11.4.7
GitLab CE/EE versions 11.5 up to 11.5.0
Description
The issue is related to a Server-Side Request Forgery (SSRF) vulnerability in webhooks. This means an attacker could potentially forge requests to internal services, leading to unauthorized access or actions.
Recommendations
For versions 8.18 up to 11.3.10, update to version 11.3.11 or later.
For versions 11.4 up to 11.4.7, update to version 11.4.8 or later.
For versions 11.5 up to 11.5.0, update to version 11.5.1 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾