Skip to content
OpenAdvisories
Unscored Public exploit CVE-2018-19571 EUVD-2018-11260GHSA-hrrx-p8r8-gj4g

GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability …

Published Jul 10, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks.

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Exploit-DB 2

GitHub 3 repositories

  • Algafix/gitlab-RCE-11.4.7 ★ 3 · Apr 11, 2021

    GitLab 11.4.7 RCE exploit with different reverse shells. CVE-2018-19571 + CVE-2018-19585

  • CS4239-U6/gitlab-ssrf ★ 0 · Nov 16, 2021

    Demonstration of CVE-2018-19571: GitLab SSRF CVE

  • xenophil90/edb-49263-fixed ★ 0 · Feb 8, 2021

    Fixed version of the Python script to exploit CVE-2018-19571 and CVE-2018-19585 (GitLab 11.4.7 - Authenticated Remote Code Execution) that is available at https://www.exploit-db.com/exploits/49263 (P…

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References