CVE-2019-15590

Published: Jan 28, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge requests and issues would be disclosed with the Group Search feature provided by Elasticsearch integration

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 12.1.0 to 12.1.14
Gitlab Gitlab	From 12.2.0 to 12.2.8
Gitlab Gitlab	From 12.3.0 to 12.3.5
Gitlab Gitlab	From 12.1.0 to 12.1.14
Gitlab Gitlab	From 12.2.0 to 12.2.8
Gitlab Gitlab	From 12.3.0 to 12.3.5