Servers and applications
CVE-2019-5464
A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is utilized.
- Severity
- Critical 9.8
- Published
- 28 Jan 2020
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 11.11.7
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
GitLabServers and applications · cpe:a:gitlab:gitlab |
|