CVE-2018-18843 - The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4.4 has SSRF

CRITICAL

The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4.4 has SSRF

Published Dec 4, 2018

10.0

CRITICAL

CVSS 3.0

EPSS 1.58%

The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4.4 has SSRF.

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

Link	Providers	Tags
https://about.gitlab.com/2018/11/01/critical-security-release-gitlab-11-dot-4-dot-4-released/		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10557		Advisory
https://gitlab.com/gitlab-org/gitlab-ce/issues/53158		x_refsource_CONFIRMExploitIssue TrackingPatchVendor Advisory