PT-2023-14062
CVE-2022-4201
·
تاريخ النشر
2023-01-27
·
تاريخ التحديث
2025-03-27
الوصف من
CVSS 3.1
3.5
منخفضةالمقاييسAV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 11.3 through 15.4.5
GitLab CE/EE versions 15.5 through 15.5.4
GitLab CE/EE versions 15.6 through 15.6.0
Description
A blind Server-Side Request Forgery (SSRF) issue allows an attacker to connect to local addresses when configuring a malicious GitLab Runner. This can be exploited when an attacker has the ability to configure a GitLab Runner.
Recommendations
For GitLab CE/EE versions 11.3 through 15.4.5, update to version 15.4.6 or later.
For GitLab CE/EE versions 15.5 through 15.5.4, update to version 15.5.5 or later.
For GitLab CE/EE versions 15.6 through 15.6.0, update to version 15.6.1 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾