CVEvulnerability
CVE-2019-6793
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-09-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.0 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-918
Description
An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable to an unauthenticated blind SSRF issue.
Affected configurations
• gitlab gitlab (>= 10.0.0 < 11.5.8)
• gitlab gitlab (>= 11.6.0 < 11.6.6)
• gitlab gitlab (>= 11.7.0 < 11.7.1)
Related
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness
References
- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ Release Notes, Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab-ce/issues/50748 Exploit, Issue Tracking, Third Party Advisory
- https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ Release Notes, Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab-ce/issues/50748 Exploit, Issue Tracking, Third Party Advisory