CVE-2019-15580CWE-201

An information exposure vulnerability exists in gitlab.com <v12.3.2, <v12.2.6, and <v12.1.10 when using the blocking merge request feature, it was possible for…

published December 18, 2019

CVSS
—
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

An information exposure vulnerability exists in gitlab.com <v12.3.2, <v12.2.6, and <v12.1.10 when using the blocking merge request feature, it was possible for an unauthenticated user to see the head pipeline data of a public project even though pipeline visibility was restricted.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01141 · 66.4th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2019-12-18T20:59Z
EPSS history
Timeline
  • 18 DEC 20:59Z
    An information exposure vulnerability exists in gitlab.com <v12.3.2, <v12.2.6, and <v12.1.10 when using the blocking merge request feature, it was possible for…
    cvelistv5