CVE-2019-5464
A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the lib...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the url_blocker.rb which could result in SSRF where the library is utilized.
参照URL
- patch about.gitlab.com
- report hackerone.com
- report gitlab.com