Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-4201: 2022/CVE-2022-4201.json · master · GitLab.org / cves · GitLab

A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local addresses when configuring a malicious GitLab Runner.

CVE
#js#git#ssrf#auth

Skip to content

GitLab

    • GitLab: the DevOps platform
    • Explore GitLab
    • Install GitLab
    • How GitLab compares
    • Get started
    • GitLab docs
    • GitLab Learn
  • Pricing

  • Talk to an expert

  • /

  • Help

    • Help

    • Support

    • Community forum

    • Submit feedback

    • Contribute to GitLab

    • Switch to GitLab Next

    Projects Groups Snippets

  • Sign up now

  • Login

  • Sign in / Register

  • GitLab.org
  • cves
  • Repository

Switch branch/tag

  • cves
  • 2022
  • CVE-2022-4201.json

Find file BlameHistoryPermalink

  • Publishing 0 updated advisories and 1 new advisories · b41851c7

    🤖 GitLab Bot 🤖 authored Jan 26, 2023

    b41851c7

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907