CVE-2019-15728

An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1

published September 16, 2019

CVSS
—
EPSS
2%
Percentile
74.6
In the wild
Unconfirmed
What it is

An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1. Protections against SSRF attacks on the Kubernetes integration are insufficient, which could have allowed an attacker to request any local network resource accessible from the GitLab server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01531 · 74.6th percentile
Published
2019-09-16T16:54Z
EPSS history
Timeline
  • 16 SEP 16:54Z
    An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1
    cvelistv5