critical10.0
CVE-2018-18843
The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4.4 has SSRF.
Impact
The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4.4 has SSRF.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 11.0.0 before 11.2.8 from 11.3.0 before 11.3.9 from 11.4.0 before 11.4.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://about.gitlab.com/2018/11/01/critical-security-release-gitlab-11-dot-4-dot-4-released/
- https://gitlab.com/gitlab-org/gitlab-ce/issues/53158
- https://about.gitlab.com/2018/11/01/critical-security-release-gitlab-11-dot-4-dot-4-released/
- https://gitlab.com/gitlab-org/gitlab-ce/issues/53158