Unscored CVE-2020-10077 EUVD-2020-2542GHSA-prpj-mw53-gcp4

GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server sid…

Published Mar 13, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk.

References

https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/
https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/index.html