CVE-2019-15590CWE-284

An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge requests…

published January 28, 2020

CVSS
—
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge requests and issues would be disclosed with the Group Search feature provided by Elasticsearch integration

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01107 · 65.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-01-28T02:31Z
EPSS history
Timeline
  • 28 JAN 02:31Z
    An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge requests…
    cvelistv5