CVE-2019-12434

An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11

published March 10, 2020

CVSS
—
EPSS
1%
Percentile
54.5
In the wild
Unconfirmed
What it is

An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug of private projects through the contrast of the destination URLs of issues linked in comments. It allows Information Disclosure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00751 · 54.5th percentile
Published
2020-03-10T13:48Z
EPSS history
Timeline
  • 10 MAR 13:48Z
    An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11
    cvelistv5