Skip to content
OpenAdvisories
Unscored CVE-2019-5464 EUVD-2019-15046GHSA-4736-r24c-m444

A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF wh…

Published Jan 28, 2020 · Updated Aug 4, 2024 · Assigned by hackerone

Vendor: GitLab Product: GitLab CE/EE Category: Web / CMS

Description

A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized.

Affected products

VendorProductAffectedFixed
GitLab GitLab CE/EE Affects GitLab CE/EE 10.2 and later, Fixed in 12.1.2 in 12.0.4 and in 11.11.6 —

References