Security Advisory

CVE-2021-39867

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-10-05 12:29:39

Last updated 2024-08-04 02:20:33

Assigner GitLab

CVSS score 6.5

State PUBLISHED

Description

In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery (SSRF) attacks.

← Browse all CVEs View on cve.org ↗