1. Home
  2. CVE Database
  3. CVE-2019-5461
LOW · 3.5

CVE-2019-5461

An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This ...

Vulnerability Description

An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.

CVSS Score

3.5

LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
GitlabGitlab>= 11.11.0, < 11.11.7

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2019-5461?

CVE-2019-5461 is a vulnerability with a CVSS score of 3.5 (LOW). An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This ...

How severe is CVE-2019-5461?

CVE-2019-5461 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-5461?

Check the references section above for vendor advisories and patch information. Affected products include: Gitlab Gitlab.