Not rated
CVE-2019-15591 An improper access control vulnerability exists in…
Description
An improper access control vulnerability exists in GitLab <12.3.3 that allows an attacker to obtain container and dependency scanning reports through the merge request widget even though public pipelines were disabled.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GitLab | 12.3.3 | No fix stated |
Other CVEs of GitLab
The 6 CVEs of GitLab →
CVE-2019-15594
GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via…
Not rated
CVE-2019-15592
GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge…
Not rated
CVE-2019-5469
An IDOR vulnerability exists in…
Not rated
CVE-2019-15593
GitLab 12.2.3 contains a security vulnerability that allows a user to affect the availability of the service through a…
Not rated