VulnerabilityModified
CVE-2019-15734
An issue was discovered in GitLab Community and Enterprise Edition 8.6 through 12.2.1.
MEDIUM 4.3EPSS 0.97%
Does this matter?
Lower severity and a low EPSS score (0.97%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was discovered in GitLab Community and Enterprise Edition 8.6 through 12.2.1. Under very specific conditions, commit titles and team member comments could become viewable to users who did not have permission to access these.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.97% probability · 60th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- gitlab/gitlab
- Source
- cve@mitre.org
References
- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/Release Notes, Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab-ce/issues/64711Broken Link
- https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/Release Notes, Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab-ce/issues/64711Broken Link
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.