Non notée
CVE-2019-15590 An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise…
Description
An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge requests and issues would be disclosed with the Group Search feature provided by Elasticsearch integration
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GitLab EE | Versions non publiées |
Références
- hackerone.com hackerone.com
- about.gitlab.com about.gitlab.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de GitLab EE
Les 10 CVE de GitLab EE →
CVE-2021-22240
Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on…
4.2
Moyenne
CVE-2020-26412
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics…
3.1
Faible
CVE-2020-26416
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms…
4.0
Moyenne
CVE-2020-13349
An issue has been discovered in GitLab EE affecting all versions starting from 8.12
4.3
Moyenne