medium6.5
CVE-2018-8801
GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component.
Impact
GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 8.3 before 10.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gitlab.com/gitlab-org/gitlab-ce/blob/master/CHANGELOG.md
- https://gitlab.com/gitlab-org/gitlab-ce/issues/41642
- https://hackerone.com/reports/301924
- https://gitlab.com/gitlab-org/gitlab-ce/blob/master/CHANGELOG.md
- https://gitlab.com/gitlab-org/gitlab-ce/issues/41642
- https://hackerone.com/reports/301924