Not rated
CVE-2019-15581 An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that…
Description
An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a project owner or maintainer to see the members of any private group via merge request approval rules.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GitLab EE | Versions not published |
References
- about.gitlab.com about.gitlab.com
- hackerone.com hackerone.com
Timeline
- Published
- Last modified
Other CVEs of GitLab EE
The 10 CVEs of GitLab EE →
CVE-2021-22240
Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on…
4.2
Medium
CVE-2020-26412
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics…
3.1
Low
CVE-2020-26416
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms…
4.0
Medium
CVE-2020-13349
An issue has been discovered in GitLab EE affecting all versions starting from 8.12
4.3
Medium