CVE-2018-19585: CRLF Injection
GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Git protocol.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19585?
The severity of CVE-2018-19585 is considered to be high due to its impact on project mirroring through CRLF injection.
How do I fix CVE-2018-19585?
To fix CVE-2018-19585, upgrade GitLab to version 11.3.11 or higher for 11.x, or to versions 11.4.8 and 11.5.1 as applicable.
Which versions of GitLab are affected by CVE-2018-19585?
GitLab community and enterprise editions from version 8.18 up to 11.3.10, as well as 11.4.x before 11.4.8, and 11.5.x before 11.5.1 are affected by CVE-2018-19585.
What type of vulnerability is CVE-2018-19585?
CVE-2018-19585 is a CRLF injection vulnerability that affects the Git protocol in GitLab project mirroring.
What impact does CVE-2018-19585 have on GitLab users?
If exploited, CVE-2018-19585 could allow attackers to inject HTTP response headers, potentially resulting in security issues such as information disclosure.