CVE-2019-9176: CSRF
Published Apr 17, 2019
·Updated
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows CSRF.
Affected Software
6 affected components
GitLab GitLab<11.6.10
GitLab GitLab<11.6.10
GitLab GitLab>=11.7.0<11.7.6
GitLab GitLab>=11.7.0<11.7.6
GitLab GitLab>=11.8.0<11.8.1
GitLab GitLab>=11.8.0<11.8.1
Event History
Apr 17, 2019
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
Description
Data Sourced
via NVD·05:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-9176?
CVE-2019-9176 is classified as a medium severity vulnerability.
2
How do I fix CVE-2019-9176?
To fix CVE-2019-9176, upgrade GitLab to versions 11.6.10, 11.7.6, or 11.8.1 or later.
3
What types of GitLab editions are affected by CVE-2019-9176?
Both GitLab Community and Enterprise Editions are affected by CVE-2019-9176.
4
What kind of vulnerability is CVE-2019-9176?
CVE-2019-9176 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
What versions of GitLab are vulnerable to CVE-2019-9176?
Versions of GitLab prior to 11.6.10, 11.7.x prior to 11.7.6, and 11.8.x prior to 11.8.1 are vulnerable.