CVE-2019-15730: SSRF
An issue was discovered in GitLab Community and Enterprise Edition 8.14 through 12.2.1. The Jira integration contains a SSRF vulnerability as a result of a bypass of the current protection mechanisms against this type of attack, which would allow sending requests to any resources accessible in the local network by the GitLab server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15730?
CVE-2019-15730 is considered a high severity vulnerability due to its SSRF nature which can potentially leak sensitive information.
How do I fix CVE-2019-15730?
To fix CVE-2019-15730, upgrade GitLab to version 12.2.3 or later, as this version addresses the SSRF vulnerability.
Which versions of GitLab are affected by CVE-2019-15730?
CVE-2019-15730 affects GitLab Community and Enterprise Editions from versions 8.14 through 12.2.1.
What impact does CVE-2019-15730 have on GitLab users?
CVE-2019-15730 allows attackers to send unauthorized requests to internal resources, which may result in data exposure.
Is there a workaround for CVE-2019-15730?
There is no documented workaround for CVE-2019-15730; the only mitigation is to upgrade to the patched version.