CVE-2019-15583CWE-200

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE)

published January 28, 2020

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). When an issue was moved to a public project from a private one, the associated private labels and the private project namespace would be disclosed through the GitLab API.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01382 · 71.9th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2020-01-28T02:24Z
EPSS history
Timeline
  • 28 JAN 02:24Z
    An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE)
    cvelistv5