fr Sign in

Not rated

CVE-2019-5466 An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names

Description

An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names.

Affected products and versions

Product	Affected versions	Fixed in
GitLab CE/EE	Versions not published

References

about.gitlab.com about.gitlab.com
hackerone.com hackerone.com
gitlab.com gitlab.com

Timeline

Published January 28, 2020
Last modified August 4, 2024

The 9 CVEs of GitLab CE/EE →

CVE-2019-15584 A denial of service exists in… Not rated CVE-2019-15589 An improper access control vulnerability exists in… Not rated CVE-2019-15575 A command injection exists in GitLab… Not rated CVE-2019-15576 An information disclosure vulnerability exists in GitLab… Not rated

Track this CVE