CVE-2019-14255: Server-Side Request Forgery (SSRF)

August 8, 2019 (updated August 13, 2019)

A Server Side Request Forgery (SSRF) vulnerability in go-camo up to version allows a remote attacker to perform HTTP requests to internal endpoints.

References

nvd.nist.gov/vuln/detail/CVE-2019-14255

Code Behaviors & Features

Detect and mitigate CVE-2019-14255 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →