CVE-2019-18457 - An issue was discovered in GitLab Community and Enterprise Edition 11.8 through 12.4 when handling Security tokens.

HIGH

An issue was discovered in GitLab Community and Enterprise Edition 11.8 through 12.4 when handling Security tokens.

Published Nov 26, 2019

8.8

HIGH

CVSS 3.1

EPSS 0.96%

An issue was discovered in GitLab Community and Enterprise Edition 11.8 through 12.4 when handling Security tokens.. It has Insecure Permissions.

No remediation recorded yet.

Weaknesses (1)

CWE-281

Link	Providers	Tags
https://about.gitlab.com/blog/2019/10/30/security-release-gitlab-12-dot-4-dot-1-released/		x_refsource_MISCVendor Advisory
https://about.gitlab.com/blog/categories/releases/		x_refsource_MISCRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8207		Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 26, 2019

Updated Aug 5, 2024

Reserved Oct 25, 2019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 26, 2019

Updated Aug 5, 2024

GitHub

No data