PT-2019-14356
CVE-2019-15734
·
Published
2019-09-16
·
Updated
2019-09-18
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GitLab Community and Enterprise Edition versions 8.6 through 12.2.1
Description
An issue was discovered where commit titles and team member comments could become viewable to users who did not have permission to access these under very specific conditions.
Recommendations
For GitLab Community and Enterprise Edition versions 8.6 through 12.2.1, update to a version that contains a fix for this issue to prevent unauthorized access to commit titles and team member comments.
Found an issue in the description? Have something to add? Feel free to write us 👾