CVE-2019-15583

Published: Jan 28, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). When an issue was moved to a public project from a private one, the associated private labels and the private project namespace would be disclosed through the GitLab API.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 12.1.0 to 12.1.12
Gitlab Gitlab	From 12.2.0 to 12.2.6
Gitlab Gitlab	From 12.3.0 to 12.3.2
Gitlab Gitlab	From 12.1.0 to 12.1.12
Gitlab Gitlab	From 12.2.0 to 12.2.6
Gitlab Gitlab	From 12.3.0 to 12.3.2