CVE-2019-9174: SSRF
Published Apr 17, 2019
·Updated
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows SSRF.
Affected Software
6 affected components
GitLab GitLab<11.6.10
GitLab GitLab<11.6.10
GitLab GitLab>=11.7.0<11.7.6
GitLab GitLab>=11.7.0<11.7.6
GitLab GitLab>=11.8.0<11.8.1
GitLab GitLab>=11.8.0<11.8.1
Event History
Apr 17, 2019
CVE Published
via MITRE·04:17 PM
Data Sourced
via MITRE·04:17 PM
Description
Data Sourced
via NVD·05:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-9174?
CVE-2019-9174 has a medium severity as it allows for server-side request forgery (SSRF) exploitation.
2
How do I fix CVE-2019-9174?
To fix CVE-2019-9174, update GitLab Community or Enterprise Edition to version 11.6.10, 11.7.6, or 11.8.1 or later.
3
What versions are affected by CVE-2019-9174?
CVE-2019-9174 affects GitLab versions prior to 11.6.10, between 11.7.0 and 11.7.6, and between 11.8.0 and 11.8.1.
4
What impact does CVE-2019-9174 have on GitLab users?
CVE-2019-9174 can potentially allow attackers to manipulate requests sent to internal systems by exploiting SSRF vulnerabilities.
5
Is CVE-2019-9174 a local or remote vulnerability?
CVE-2019-9174 is considered a remote vulnerability as it can be exploited over the network.