PT-2019-14292
CVE-2019-15576
·
Published
2019-12-18
·
Updated
2021-11-02
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions prior to 12.3.2
GitLab CE/EE versions prior to 12.2.6
GitLab CE/EE versions prior to 12.1.12
Description
An information disclosure issue exists that allows an attacker to view private system notes from a GraphQL endpoint.
Recommendations
For versions prior to 12.3.2, update to version 12.3.2 or later.
For versions prior to 12.2.6, update to version 12.2.6 or later.
For versions prior to 12.1.12, update to version 12.1.12 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾