CVE-2018-19495: SSRF
An issue was discovered in GitLab Community and Enterprise Edition before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an SSRF vulnerability in the Prometheus integration.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19495?
CVE-2018-19495 is classified as a medium severity SSRF vulnerability affecting GitLab versions prior to specified patch releases.
How do I fix CVE-2018-19495?
To fix CVE-2018-19495, upgrade your GitLab Community or Enterprise Edition to version 11.3.11, 11.4.8, or 11.5.1 or later.
Which GitLab versions are vulnerable to CVE-2018-19495?
GitLab Community and Enterprise Editions before version 11.3.11, between 11.4.0 and 11.4.8, and between 11.5.0 and 11.5.1 are vulnerable to CVE-2018-19495.
What type of vulnerability is CVE-2018-19495?
CVE-2018-19495 is an SSRF (Server-Side Request Forgery) vulnerability found in the Prometheus integration of GitLab.
Are both GitLab Community and Enterprise Editions affected by CVE-2018-19495?
Yes, both GitLab Community and Enterprise Editions are affected by CVE-2018-19495.