CVE-2019-6793

high

Description

An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable to an unauthenticated blind SSRF issue.

References

https://gitlab.com/gitlab-org/gitlab-ce/issues/50748

https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/

Details

Source: Mitre, NVD

Published: 2019-09-09

Updated: 2019-09-10

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

Severity: High

Detections

Analytics