ID | CVE-2021-39867 | ||||||
Summary | In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery (SSRF) attacks. | ||||||
References | |||||||
Vulnerable Configurations |
|
||||||
CVSS |
|
||||||
Access |
|
||||||
Impact |
|
||||||
Last major update | 05-10-2021 - 13:26 | ||||||
Published | 05-10-2021 - 13:15 | ||||||
Last modified | 05-10-2021 - 13:26 |