{"id":"CVE-2019-19261","details":"GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF.","modified":"2026-08-27T19:00:03.493058Z","published":"2020-01-03T17:15:11.850Z","references":[{"type":"ADVISORY","url":"https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/"},{"type":"ADVISORY","url":"https://about.gitlab.com/blog/categories/releases/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.com/gitlab-org/gitlab","events":[{"introduced":"93e064c99a3856dc92b2a964cc62b68b896e5fbe"},{"fixed":"446272bad6ccc2651f2578bc56117910f0586cf2"}],"database_specific":{"extracted_events":[{"introduced":"6.7.0"},{"fixed":"12.5.1"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*"}}],"versions":["v12.5.0-ee","v12.5.0-rc44-ee","v12.5.0-rc43-ee","v12.5.0-rc42-ee","11-10-0cfa69752d8-74ffd66ae-ee","11-10-0cfa69752d8-0d9531c80-ee","11-10-119f9509d50-6d7537235-ee","v7.3.0-ee","v7.3.0.rc1-ee","v7.2.0.rc5-ee","v7.2.0.rc4-ee","v7.2.0.rc3-ee","v7.2.0.rc2-ee","v7.2.0.rc1-ee","v7.1.0-ee","v7.1.0.rc1-ee","v7.0.0-ee","v6.8.0-ee","v6.7.0-ee"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-19261.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}