Security Advisory

CVE-2019-5464

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-28 02:23:14
Last updated 2024-08-04 19:54:53
Assigner hackerone
CVSS score not scored
State PUBLISHED

Description

A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized.