CVE-2019-15728
Summary
| CVE | CVE-2019-15728 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-09-16 17:15:00 UTC |
| Updated | 2019-09-18 13:23:00 UTC |
| Description | An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1. Protections against SSRF attacks on the Kubernetes integration are insufficient, which could have allowed an attacker to request any local network resource accessible from the GitLab server. |
Risk And Classification
Problem Types: CWE-918
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| DNS Rebind SSRF in Kubernetes Integration (#61314) · Issues · GitLab.org / GitLab FOSS · GitLab | MISC | gitlab.com | Broken Link |
| GitLab Security Release: 12.2.3, 12.1.8, and 12.0.8 | GitLab | MISC | about.gitlab.com | Release Notes, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.