CVE-2019-5469CWE-639

An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files…

published December 18, 2019

CVSS
—
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00771 · 55.2th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2019-12-18T20:59Z
EPSS history
Timeline
  • 18 DEC 20:59Z
    An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files…
    cvelistv5