CVE-2020-10077

CVE-2020-10077

EPSS 1.2%

GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/index.html