SERVER-WEBAPP GitLab CI Lint server side request forgery attempt

IPS-NPA

2 SIDs: 65983, 66436

Description

Detects an attempt to exploit CVE-2021-22175, and CVE-2021-39935, a server-side request forgery flaw that can make the server send requests to internal or external targets in GitLab CI Lint.

CVEs

CVE-2021-22175 CVE-2021-39935

References

gitlab.com
gitlab.com