nginx
tcp/443
The following Gitlab instance is publicly accessible and looks out-dated :
It is critical to update to a safe version as soon as possible to avoid account takeover.
Severity is mitigated by the need of a valid email address.
Reference:
Severity: high
Fingerprint: db64c48d331961cce5776b3a892edddd892edddd892edddd892edddd892edddd
Found vulnerable Gitlab instance Affected by CVE-2023-7028
Open service 52.29.144.54:443 · gitlab.logopotam.ru
2024-12-22 05:03
HTTP/1.1 302 Found Server: nginx Date: Sun, 22 Dec 2024 05:03:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 107 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab.logopotam.ru/users/sign_in Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01JFPBYT9BFB0X8KXAQQRTGWTB","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01JFPBYT9BFB0X8KXAQQRTGWTB X-Runtime: 0.044662 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab.logopotam.ru/users/sign_in">redirected</a>.</body></html>
Open service 52.29.144.54:443 · gitlab.logopotam.ru
2024-12-20 06:35
HTTP/1.1 302 Found Server: nginx Date: Fri, 20 Dec 2024 06:35:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 107 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab.logopotam.ru/users/sign_in Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01JFHCERNTJSRN4A624ZHWEH3X","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01JFHCERNTJSRN4A624ZHWEH3X X-Runtime: 0.069067 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab.logopotam.ru/users/sign_in">redirected</a>.</body></html>
Open service 52.29.144.54:443 · gitlab.logopotam.ru
2024-12-18 23:37
HTTP/1.1 302 Found Server: nginx Date: Wed, 18 Dec 2024 23:37:41 GMT Content-Type: text/html; charset=utf-8 Content-Length: 107 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab.logopotam.ru/users/sign_in Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01JFE24RXYY4RXGFG2ZJ2J7K3Y","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01JFE24RXYY4RXGFG2ZJ2J7K3Y X-Runtime: 0.099572 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab.logopotam.ru/users/sign_in">redirected</a>.</body></html>
Open service 52.29.144.54:443 · gitlab.logopotam.ru
2024-12-14 05:05
HTTP/1.1 302 Found Server: nginx Date: Sat, 14 Dec 2024 05:05:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 107 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab.logopotam.ru/users/sign_in Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01JF1RWGDN3ZVRB2MQPV2GBDAV","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01JF1RWGDN3ZVRB2MQPV2GBDAV X-Runtime: 0.021069 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab.logopotam.ru/users/sign_in">redirected</a>.</body></html>
Open service 52.29.144.54:443 · gitlab.logopotam.ru
2024-12-12 11:05
HTTP/1.1 302 Found Server: nginx Date: Thu, 12 Dec 2024 11:05:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 107 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab.logopotam.ru/users/sign_in Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01JEX8PCMFGHP6TGSDNC0CP2EM","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01JEX8PCMFGHP6TGSDNC0CP2EM X-Runtime: 0.025863 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab.logopotam.ru/users/sign_in">redirected</a>.</body></html>
Open service 52.29.144.54:443 · gitlab.logopotam.ru
2024-12-02 19:06
HTTP/1.1 302 Found Server: nginx Date: Mon, 02 Dec 2024 19:06:55 GMT Content-Type: text/html; charset=utf-8 Content-Length: 107 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab.logopotam.ru/users/sign_in Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01JE4C9FVB3WC97FN46VZ4SVRR","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01JE4C9FVB3WC97FN46VZ4SVRR X-Runtime: 0.060087 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab.logopotam.ru/users/sign_in">redirected</a>.</body></html>
Open service 52.29.144.54:443 · gitlab.logopotam.ru
2024-11-30 17:35
HTTP/1.1 302 Found Server: nginx Date: Sat, 30 Nov 2024 17:35:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 107 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab.logopotam.ru/users/sign_in Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01JDZ28QF5W429TH7621TJAGTC","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01JDZ28QF5W429TH7621TJAGTC X-Runtime: 0.048991 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab.logopotam.ru/users/sign_in">redirected</a>.</body></html>
Open service 52.29.144.54:443 · gitlab.logopotam.ru
2024-11-28 21:23
HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Nov 2024 21:23:40 GMT Content-Type: text/html; charset=utf-8 Content-Length: 107 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab.logopotam.ru/users/sign_in Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01JDTAH0ND9VWP9H6T4CK67B9N","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01JDTAH0ND9VWP9H6T4CK67B9N X-Runtime: 0.028724 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab.logopotam.ru/users/sign_in">redirected</a>.</body></html>
Open service 52.29.144.54:443 · gitlab.logopotam.ru
2024-11-26 21:56
HTTP/1.1 302 Found Server: nginx Date: Tue, 26 Nov 2024 21:56:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 107 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab.logopotam.ru/users/sign_in Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01JDN7K1SC1NF43JPA7RMFQJ52","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01JDN7K1SC1NF43JPA7RMFQJ52 X-Runtime: 0.063951 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab.logopotam.ru/users/sign_in">redirected</a>.</body></html>
Open service 52.29.144.54:443 · gitlab.logopotam.ru
2024-11-20 23:22
HTTP/1.1 302 Found Server: nginx Date: Wed, 20 Nov 2024 23:22:10 GMT Content-Type: text/html; charset=utf-8 Content-Length: 107 Connection: close Cache-Control: no-cache Content-Security-Policy: Location: https://gitlab.logopotam.ru/users/sign_in Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Gitlab-Meta: {"correlation_id":"01JD5Y47CKVKN3Y4NV6MCSJE50","version":"1"} X-Permitted-Cross-Domain-Policies: none X-Request-Id: 01JD5Y47CKVKN3Y4NV6MCSJE50 X-Runtime: 0.019568 X-Ua-Compatible: IE=edge X-Xss-Protection: 1; mode=block Strict-Transport-Security: max-age=63072000 Referrer-Policy: strict-origin-when-cross-origin <html><body>You are being <a href="https://gitlab.logopotam.ru/users/sign_in">redirected</a>.</body></html>