Not rated
CVE-2019-15578 An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise…
Description
An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). The path of a private project, that used to be public, would be disclosed in the unsubscribe email link of issues and merge requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GitLab CE/EE | Versions not published |
Other CVEs of GitLab CE/EE
The 22 CVEs of GitLab CE/EE →
CVE-2020-26408
A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to =13.5 to =13.6…
5.3
Medium
CVE-2020-13357
An issue was discovered in Gitlab CE/EE versions >= 13.1 to = 13.5 to = 13.6…
4.3
Medium
CVE-2020-26413
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2
5.3
Medium
CVE-2020-26417
Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership
5.3
Medium