CVE-2019-5461

PoC —

CVSS 3.1

3.5 low

EPSS

<1%p60

Published

Sep 9, 2019 (Sep 9, 2019)

Modified

Jun 17, 2026

Description

An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.

Vendors: gitlab
Products: gitlab
Weakness: CWE-20
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.