CVE-2020-10077 - GitLab EE 3.0 through 12.8.1 allows SSRF

Back Back to CVE browser

CRITICAL

GitLab EE 3.0 through 12.8.1 allows SSRF

Published Mar 13, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.19%

Description

GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (3)

https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/
x_refsource_MISCRelease NotesVendor Advisory
https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/index.html
x_refsource_CONFIRMRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2542
Advisory

Link	Providers	Tags
https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/		x_refsource_MISCRelease NotesVendor Advisory
https://about.gitlab.com/releases/2020/03/04/gitlab-12-dot-8-dot-2-released/index.html		x_refsource_CONFIRMRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2542		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 13, 2020

Updated Aug 4, 2024

Reserved Mar 4, 2020

Link CVE-2020-10077

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-10077

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 13, 2020

Updated Aug 4, 2024

Link EUVD-2020-2542

GitHub

No data