CVE-2019-6795
First published: Mon Sep 09 2019(Updated: )
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient Visual Distinction of Homoglyphs Presented to a User. IDN homographs and RTLO characters are rendered to unicode, which could be used for social engineering.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GitLab | <11.5.8 | |
| GitLab | <11.5.8 | |
| GitLab | >=11.6.0<11.6.6 | |
| GitLab | >=11.6.0<11.6.6 | |
| GitLab | >=11.7.0<11.7.1 | |
| GitLab | >=11.7.0<11.7.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-6795?
CVE-2019-6795 has been classified as a medium-severity vulnerability due to its potential exploitation for social engineering attacks.
How do I fix CVE-2019-6795?
To fix CVE-2019-6795, upgrading to GitLab versions 11.5.8, 11.6.6, or 11.7.1 or later is recommended.
What is the impact of CVE-2019-6795 on GitLab users?
CVE-2019-6795 can lead to confusion among users as legitimate URLs may be visually similar to malicious ones, increasing the risk of phishing attacks.
Which versions of GitLab are affected by CVE-2019-6795?
CVE-2019-6795 affects GitLab Community and Enterprise Edition versions prior to 11.5.8, between 11.6.0 and 11.6.6, and between 11.7.0 and 11.7.1.
Is there a workaround for CVE-2019-6795?
There are no known workarounds for CVE-2019-6795; the recommended action is to upgrade to a patched version of GitLab.
- agent/references
- agent/author
- agent/severity
- agent/softwarecombine
- agent/description
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/gitlab
- canonical/gitlab
- version/gitlab/11.6.0
- version/gitlab/11.7.0