CVE-2019-6793

EPSS 3.5%

Vexday Risk Score

18Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 3.5%KEV nãoPoC —Nuclei simMetasploit —Patch —

Lifecycle

09 Sep 2019Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable to an unauthenticated blind SSRF issue.

Affected products

n/a · n/a

References

https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/https://gitlab.com/gitlab-org/gitlab-ce/issues/50748