CVE-2019-12443

2020-03-1015:15:14

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.7%

JSON

An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11. Multiple features contained Server-Side Request Forgery (SSRF) vulnerabilities caused by an insufficient validation to prevent DNS rebinding attacks.

CPENameOperatorVersion
gitlabeq11.9.4-ee
gitlabeq11.9.5-ee
gitlabeq11.9.0-ee
gitlabeq11.9.10-ee
gitlabeq11.9.11-ee
gitlabeq11.9.7-ee
gitlabeq11.9.6-ee
gitlabeq11.9.8-ee
gitlabeq11.9.1-ee
gitlabeq11.9.12-ee

Name	Operator	Version
gitlab	eq	11.9.4-ee
gitlab	eq	11.9.5-ee
gitlab	eq	11.9.0-ee
gitlab	eq	11.9.10-ee
gitlab	eq	11.9.11-ee
gitlab	eq	11.9.7-ee
gitlab	eq	11.9.6-ee
gitlab	eq	11.9.8-ee
gitlab	eq	11.9.1-ee
gitlab	eq	11.9.12-ee