CVE-2019-13005

An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2

published March 10, 2020

CVSS
—
EPSS
1%
Percentile
61.3
In the wild
Unconfirmed
What it is

An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2. The GitLab graphql service was vulnerable to multiple authorization issues that disclosed restricted user, group, and repository metadata to unauthorized users. It has Incorrect Access Control.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00964 · 61.3th percentile
Published
2020-03-10T14:57Z
EPSS history
Timeline
  • 10 MAR 14:57Z
    An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2
    cvelistv5