CVE-2019-5461
An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST reque...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
参照URL
- advisory about.gitlab.com
- advisory hackerone.com
- report gitlab.com