Vulnerability Description
An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded images and media files in markdown could be pointed to an arbitrary server, which would reveal the IP address of clients requesting the file from that server.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gitlab | Gitlab | < 12.0.8 |
References
- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-releaRelease NotesVendor Advisory
- https://gitlab.com/gitlab-org/gitlab-ce/issues/55115Broken Link
- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-releaRelease NotesVendor Advisory
- https://gitlab.com/gitlab-org/gitlab-ce/issues/55115Broken Link
FAQ
What is CVE-2019-15726?
CVE-2019-15726 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded images and media files in markdown could be pointed to an arbitrary server, which would reveal the IP addres...
How severe is CVE-2019-15726?
CVE-2019-15726 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-15726?
Check the references section above for vendor advisories and patch information. Affected products include: Gitlab Gitlab.