CVE-2018-19571 | BDVDB-2026-118944 Detail
Description#
GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/
- https://gitlab.com/gitlab-org/gitlab-ce/issues/53242
- http://packetstormsecurity.com/files/160516/GitLab-11.4.7-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/160699/GitLab-11.4.7-Remote-Code-Execution.html
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.