SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-9866

It allows Information Disclosure.

MEDIUM 6.5EPSS 1.18%

Does this matter?

Lower severity and a low EPSS score (1.18%). Track it; it rarely justifies an emergency change on its own.

Description

An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.7.7 and 11.8.x before 11.8.3. It allows Information Disclosure.

CVSS 3.0
6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
1.18% probability · 66th percentile
CISA KEV
Not listed
Weakness
CWE-200
Affected
gitlab/gitlab
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.