Threats tagged 'bit-gitlab-2024-8635'

A Server-Side Request Forgery (SSRF) vulnerability exists in GitLab Enterprise Edition versions starting from 16.8 up to but not including 17.1.7, from 17.2 up to but not including 17.2.5, and from 17.3 up to but not including 17.3.2. This flaw allows an attacker to make unauthorized requests to internal resources by exploiting a custom Maven Dependency Proxy URL.