CVE-2019-15728

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 10.1 through 12.2.1

Description An issue was discovered where protections against SSRF attacks on the Kubernetes integration are insufficient. This could have allowed an attacker to request any local network resource accessible from the GitLab server.

Recommendations For GitLab Community and Enterprise Edition versions 10.1 through 12.2.1, consider restricting access to the Kubernetes integration until a patch is available. As a temporary workaround, limit the exposure of local network resources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.