CVE-2019-15730
16.09.2019, 17:15
An issue was discovered in GitLab Community and Enterprise Edition 8.14 through 12.2.1. The Jira integration contains a SSRF vulnerability as a result of a bypass of the current protection mechanisms against this type of attack, which would allow sending requests to any resources accessible in the local network by the GitLab server.
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 8.14.0 ≤ 𝑥 < 12.0.8 |
| gitlab | gitlab | 8.14.0 ≤ 𝑥 < 12.0.8 |
| gitlab | gitlab | 12.1.0 ≤ 𝑥 < 12.1.8 |
| gitlab | gitlab | 12.1.0 ≤ 𝑥 < 12.1.8 |
| gitlab | gitlab | 12.2.0 ≤ 𝑥 < 12.2.3 |
| gitlab | gitlab | 12.2.0 ≤ 𝑥 < 12.2.3 |
𝑥
= Vulnerable software versions
