gitlab-org--gitlab-foss/changelogs/unreleased/security-55468-check-validity-before-querying.yml
Reuben Pereira 50591efc75 Check validity of prometheus_service before query
Check validity before querying so that if the dns entry for the api_url
has been changed to something invalid after the model was saved and
checked for validity, it will not query. This is to solve a toctou
(time of check to time of use) issue.
2019-03-04 18:36:43 +00:00

5 lines
122 B
YAML

---
title: Fix blind SSRF in Prometheus integration by checking URL before querying
merge_request:
author:
type: security