CVE-2019-12443 - An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11

Back Back to CVE browser

CRITICAL

An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11

Published Mar 10, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.21%

Description

An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11. Multiple features contained Server-Side Request Forgery (SSRF) vulnerabilities caused by an insufficient validation to prevent DNS rebinding attacks.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (3)

https://about.gitlab.com/blog/categories/releases/
x_refsource_MISCRelease NotesVendor Advisory
https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/
x_refsource_CONFIRMRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4052
Advisory

Link	Providers	Tags
https://about.gitlab.com/blog/categories/releases/		x_refsource_MISCRelease NotesVendor Advisory
https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/		x_refsource_CONFIRMRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4052		Advisory