CVEs-PoC/2019/CVE-2019-5461.md

CVE-2019-5461

Description

An input validation problem was discovered in the GitHub service integration which could result in an attacker being able to make arbitrary POST requests in a GitLab instance's internal network. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.

POC

Reference

• https://gitlab.com//gitlab-org/gitlab-ce/issues/54649
• https://gitlab.com//gitlab-org/gitlab-ce/issues/54649
• https://hackerone.com/reports/446593
• https://hackerone.com/reports/446593

Github

No PoCs found on GitHub currently.