CVE-2022-4335
A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an...
Original description
The description as published by the source.
A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker to connect to a local host.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"15.4.6"},{"introduced":"15.5.0"},{"fixed":"15.5.5"},{"introduced":"15.6.0"},{"fixed":"15.6.1"}]}]
References
- advisory gitlab.com
- advisory gitlab.com
- advisory hackerone.com
- web nvd.nist.gov