NetSight
IP …
high7.5Public exploit code

CVE-2018-19585

GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Gi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Git protocol.

Affected products

VendorProductAffected versions
GitlabGitlab
from 8.18.0 before 11.3.11
from 11.4.0 before 11.4.8
from 11.5.0 before 11.5.1

Weakness classification

CWE-93

References