gitlab-org--gitlab-foss/changelogs/unreleased/security-55468-check-validi...

---
title: Fix blind SSRF in Prometheus integration by checking URL before querying
merge_request:
author:
type: security
Check validity of prometheus_service before query Check validity before querying so that if the dns entry for the api_url has been changed to something invalid after the model was saved and checked for validity, it will not query. This is to solve a toctou (time of check to time of use) issue. 2019-03-04 18:36:43 +00:00			`---`
			`title: Fix blind SSRF in Prometheus integration by checking URL before querying`
			`merge_request:`
			`author:`
			`type: security`