CVE-2019-15592

Published: Feb 14, 2020

Modified: Aug 5, 2024

PUBLISHED

Description

GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline.

Vendor	Product	Versions
n/a	GitLab	affected `12.2.3`

Weaknesses (CWE)

CWE-200

References

https://hackerone.com/reports/588876

x_refsource_MISC

https://about.gitlab.com/releases/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-15592

Description

Affected Products

Weaknesses (CWE)

References