PT-2020-11134
CVE-2019-5464
·
تاريخ النشر
2020-01-28
·
تاريخ التحديث
2020-01-31
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 10.2 and later
Description
A flawed DNS rebinding protection issue was discovered in the
url blocker.rb library, which could result in Server-Side Request Forgery (SSRF) where the library is utilized.Recommendations
For GitLab CE/EE versions 10.2 and later, consider restricting access to the
url blocker.rb library until a patch is available. As a temporary workaround, review and limit the usage of the library to minimize the risk of SSRF exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾