VULNERABILITY INTELLIGENCE

CVE-2019-6793

CVSS score7 HIGH

EPSS probability3.51%

CISA KEVNot currently listed

Published2019-09-09

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L

Description

An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable to an unauthenticated blind SSRF issue.

Weakness classification

CWE-918: Server-Side Request Forgery (SSRF)

Primary references

cve@mitre.org — Release Notes, Vendor Advisory
cve@mitre.org — Exploit, Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Third Party Advisory