CVE-2019-18451: Medium severity gitlab vulnerability
Published Nov 26, 2019
·Updated
An issue was discovered in GitLab Community and Enterprise Edition 10.7.4 through 12.4 in the InternalRedirect filtering feature. It has an Open Redirect.
Affected Software
2 affected components
GitLab GitLab>=10.7.4<=12.4.0
GitLab GitLab>=10.7.4<=12.4.0
Event History
Nov 26, 2019
CVE Published
via MITRE·04:43 PM
Data Sourced
via MITRE·04:43 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-18451?
CVE-2019-18451 has been classified as a high-severity vulnerability due to its potential for exploitation via open redirects.
2
How do I fix CVE-2019-18451?
To fix CVE-2019-18451, upgrade your GitLab Community or Enterprise Edition to version 12.4.1 or later.
3
What are the affected versions of CVE-2019-18451?
CVE-2019-18451 affects GitLab Community and Enterprise Editions from version 10.7.4 up to and including 12.4.
4
What kind of vulnerability is CVE-2019-18451?
CVE-2019-18451 is an open redirect vulnerability which can allow attackers to redirect users to malicious sites.
5
Can CVE-2019-18451 be exploited remotely?
Yes, CVE-2019-18451 can be exploited remotely, posing a risk to users who click on crafted links.