High severity7.5NVD Advisory· Published Sep 16, 2019· Updated Jun 17, 2026
CVE-2019-15728
CVE-2019-15728
Description
An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1. Protections against SSRF attacks on the Kubernetes integration are insufficient, which could have allowed an attacker to request any local network resource accessible from the GitLab server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 2 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=10.1.0,<12.0.8
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=10.1.0,<12.0.8
- (no CPE)range: 10.1 - 12.2.1
- GitLab/Community and Enterprise Editiondescription
- Range: 10.1 - 12.2.1
- Range: 10.1 - 12.2.1
Patches
Vulnerability mechanics
References
2- about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/nvdRelease NotesVendor Advisory
- gitlab.com/gitlab-org/gitlab-ce/issues/61314nvdBroken Link
News mentions
0No linked articles in our index yet.