CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2019-15726

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded images and media files in markdown could be pointed to an arbitrary server, which would reveal the IP address of clients requesting the file from that server.

Score
5.3 medium
Published
2019-09-16
Links
NVD · cve.org

Affected ports (1)

PortPackageVersionStatusMaintainer
devel/rubygem-gitlab_metarubygem-gitlab_meta7.0unaddressedruby@FreeBSD.org

VuXML

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>rubygem-gitlab_meta</name>
	<range><lt>12.0.8</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>An issue was discovered in GitLab Community and Enterprise Edition
	through 12.2.1. Embedded images and media files in markdown could be
	pointed to an arbitrary server, which would reveal the IP address of
	clients requesting the file from that server.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2019-15726</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2019-15726</url>
    </references>
    <dates>
      <discovery>2019-09-16</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>