CVE-2018-18843

7.5

HIGHCVSS v2

Published

December 4, 2018

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4.4 has SSRF.

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

>= 11.0.0, < 11.2.8, >= 11.3.0, < 11.3.9, >= 11.4.0, < 11.4.4NVD

NPMsemantic-release plugin to publish a GitLab release

>= 11.0.0, < 11.2.8, >= 11.3.0, < 11.3.9, >= 11.4.0, < 11.4.4NVD

GitHub

:fox_face: semantic-release plugin to publish a GitLab release

>= 11.0.0, < 11.2.8, >= 11.3.0, < 11.3.9, >= 11.4.0, < 11.4.4NVD

Python Package IndexGet GitLab user Details

>= 11.0.0, < 11.2.8, >= 11.3.0, < 11.3.9, >= 11.4.0, < 11.4.4NVD

Crates.ioGitlab API client.

>= 11.0.0, < 11.2.8, >= 11.3.0, < 11.3.9, >= 11.4.0, < 11.4.4NVD

RubyGemsRuby client and CLI for GitLab API

>= 11.0.0, < 11.2.8, >= 11.3.0, < 11.3.9, >= 11.4.0, < 11.4.4NVD

GitHubRuby wrapper and CLI for the GitLab REST API

>= 11.0.0, < 11.2.8, >= 11.3.0, < 11.3.9, >= 11.4.0, < 11.4.4NVD