CVE-2019-13005 - An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2

Back Back to CVE browser

MEDIUM

An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2

Published Mar 10, 2020

4.3

MEDIUM

CVSS 3.1

EPSS 0.96%

Description

An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2. The GitLab graphql service was vulnerable to multiple authorization issues that disclosed restricted user, group, and repository metadata to unauthorized users. It has Incorrect Access Control.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://about.gitlab.com/blog/categories/releases/
x_refsource_MISCRelease NotesVendor Advisory
https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/
x_refsource_CONFIRMRelease NotesVendor Advisory

Link	Providers	Tags
https://about.gitlab.com/blog/categories/releases/		x_refsource_MISCRelease NotesVendor Advisory
https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/		x_refsource_CONFIRMRelease NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 10, 2020

Updated Aug 4, 2024

Reserved Jun 28, 2019

Link CVE-2019-13005

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-13005

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-13005