CVE-2019-5461
An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST reque...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.
Références
- advisory about.gitlab.com
- advisory hackerone.com
- report gitlab.com