CVE-2019-14942 - An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6

Back Back to CVE browser

MEDIUM

An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6

Published Apr 15, 2023

5.9

MEDIUM

CVSS 3.1

EPSS 0.46%

Description

An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Cookies for GitLab Pages (which have access control) could be sent over cleartext HTTP.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (3)

https://about.gitlab.com/blog/categories/releases/
Release Notes
https://about.gitlab.com/releases/2019/08/12/critical-security-release-gitlab-12-dot-1-dot-6-released/
Vendor Advisory
https://gitlab.com/gitlab-org/gitlab-pages/issues/232
Broken Link

Link	Providers	Tags
https://about.gitlab.com/blog/categories/releases/		Release Notes
https://about.gitlab.com/releases/2019/08/12/critical-security-release-gitlab-12-dot-1-dot-6-released/		Vendor Advisory
https://gitlab.com/gitlab-org/gitlab-pages/issues/232		Broken Link

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 15, 2023

Updated Feb 6, 2025

Reserved Aug 11, 2019

Link CVE-2019-14942

CISA Vulnrichment

Updated Feb 6, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-14942

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-14942