CVE-2019-13121 - An issue was discovered in GitLab Enterprise Edition 10.6 through 12.0.2

Back Back to CVE browser

HIGH

An issue was discovered in GitLab Enterprise Edition 10.6 through 12.0.2

Published Mar 10, 2020

7.5

HIGH

CVSS 3.1

EPSS 0.90%

Description

An issue was discovered in GitLab Enterprise Edition 10.6 through 12.0.2. The GitHub project integration was vulnerable to an SSRF vulnerability which allowed an attacker to make requests to local network resources. It has Incorrect Access Control.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (3)

https://about.gitlab.com/blog/categories/releases/
x_refsource_MISCRelease NotesVendor Advisory
https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/
x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4658
Advisory

Link	Providers	Tags
https://about.gitlab.com/blog/categories/releases/		x_refsource_MISCRelease NotesVendor Advisory
https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4658		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 10, 2020

Updated Aug 4, 2024

Reserved Jul 1, 2019

Link CVE-2019-13121

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-13121

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 10, 2020

Updated Aug 4, 2024

Link EUVD-2019-4658

GitHub

No data