CVE-2021-39894

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.0 and later

Description: A DNS rebinding vulnerability exists in the Fogbugz importer, which may be used by attackers to exploit Server Side Request Forgery attacks. This issue affects all versions of GitLab CE/EE since version 8.0.

Recommendations: For GitLab CE/EE versions 8.0 and later, consider disabling the Fogbugz importer until a patch is available to prevent exploitation of the DNS rebinding vulnerability. Restrict access to the importer to minimize the risk of Server Side Request Forgery attacks.