First published: Fri Jun 11 2021(Updated: )
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is disabled
Credit: cve@gitlab.com
Affected Software | Affected Version | How to fix |
---|---|---|
GitLab GitLab | >=10.5.0<13.6.7 | |
GitLab GitLab | >=10.5.0<13.6.7 | |
GitLab GitLab | >=13.7.0<13.7.7 | |
GitLab GitLab | >=13.7.0<13.7.7 | |
GitLab GitLab | >=13.8.0<13.8.4 | |
GitLab GitLab | >=13.8.0<13.8.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.