← Database

CVE-2021-39867

MEDIUM CVSS: 6.5 Published: 2021-10-05 Modified: 2026-06-17

Description

In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery (SSRF) attacks.

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-918

References