CVE-2019-19628

Name of the Vulnerable Software and Affected Versions GitLab EE versions 11.3 through 12.5.3 GitLab EE version 12.4.5 GitLab EE version 12.3.8

Description The issue is related to insufficient parameter sanitization for the Maven package registry, which could lead to privilege escalation and remote code execution under certain conditions.

Recommendations For GitLab EE versions 11.3 through 12.5.3, update to a version that includes the necessary security patches to address the insufficient parameter sanitization issue. For GitLab EE version 12.4.5, apply the recommended security fixes to prevent privilege escalation and remote code execution. For GitLab EE version 12.3.8, consider restricting access to the Maven package registry until a patch is available to mitigate the risk of exploitation.