CVE-2020-13286
For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery.
影響パッケージ
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.7.0"},{"fixed":"13.0.12"},{"introduced":"13.1.0"},{"fixed":"13.1.6"},{"introduced":"13.2.0"},{"fixed":"13.2.3"}]}]
参照URL
- advisory gitlab.com
- advisory hackerone.com
- web gitlab.com
- web nvd.nist.gov