CVE-2021-39935

HIGH7.5⚠ KEVEPSS 64.5%

GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

發布日:2024/3/6修改日:2026/2/4加入 CISA KEV 日:2026/2/3

描述

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API

受影響套件(1)

  • Bitnami/gitlab>= 10.5.0, < 14.3.6, >= 14.4.0, < 14.4.4, >= 14.5.0, < 14.5.2

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1HIGH7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

參考連結(5)