← All advisories

High severity8.8OSV Advisory· Published Dec 4, 2018· Updated Jun 17, 2026

CVE-2018-18646

CVE-2018-18646

Description

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows SSRF.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

GitLab Inc./GitLabOSV4 versions
v11.4.0-ee, v11.4.1-ee, v11.4.2-ee+ 3 more
- (no CPE)range: v11.4.0-ee, v11.4.1-ee, v11.4.2-ee
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=5.3,<11.2.7
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=5.3,<11.2.7
- (no CPE)range: <11.2.7, 11.3.x <11.3.8, 11.4.x <11.4.3
GitLab Inc./GitLab Community Editionllm-fuzzy
Range: <11.2.7, 11.3.x <11.3.8, 11.4.x <11.4.3

Patches

Vulnerability mechanics

References

2

gitlab.com/gitlab-org/gitlab-ce/issues/51142nvdExploitIssue TrackingVendor Advisory
about.gitlab.com/2018/10/29/security-release-gitlab-11-dot-4-dot-3-released/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.