CVE-2018-17452

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side Request Forgery (SSRF) via a loopback address to the validate_localhost function in url_blocker.rb.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory about.gitlab.com
advisory about.gitlab.com