QwikSec

Security Database

CVE

CWE

Training

CVE-2019-5461

Published: Sep 9, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.

Vendor	Product	Versions
n/a	GitLab Community Edition	affected `Fix Versions: 12.1.2, 12.0.4, and 11.11.6`

Weaknesses (CWE)

References

https://hackerone.com/reports/446593

x_refsource_MISC

https://gitlab.com//gitlab-org/gitlab-ce/issues/54649

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.