CVE-2019-6788: High severity gitlab vulnerability
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 3 of 6). For installations using GitHub or Bitbucket OAuth integrations, it is possible to use a covert redirect to obtain the user OAuth token for those services.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-6788?
CVE-2019-6788 has a severity rating that is categorized as medium due to its potential for information disclosure.
How do I fix CVE-2019-6788?
To fix CVE-2019-6788, upgrade GitLab to version 11.5.8, 11.6.6, or 11.7.1 or later.
What does CVE-2019-6788 affect?
CVE-2019-6788 affects GitLab Community and Enterprise Editions prior to the specified patched versions.
What is the impact of CVE-2019-6788?
The impact of CVE-2019-6788 is the potential unauthorized access to sensitive user information due to a covert redirect in OAuth integrations.
How can I identify if my GitLab installation is affected by CVE-2019-6788?
You can identify if your GitLab installation is affected by CVE-2019-6788 by checking the version number of your GitLab software.