CVE-2019-19629

In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group…

published January 5, 2020

CVSS
—
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch integration.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01155 · 66.7th percentile
Published
2020-01-05T21:54Z
EPSS history
Timeline
  • 05 JAN 21:54Z
    In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group…
    cvelistv5