CVE-2019-19254 - GitLab Community Edition (CE) and Enterprise Edition (EE)

MEDIUM

GitLab Community Edition (CE) and Enterprise Edition (EE)

Published Jan 3, 2020

5.3

MEDIUM

CVSS 3.1

EPSS 1.08%

GitLab Community Edition (CE) and Enterprise Edition (EE). 9.6 and later through 12.5 has Incorrect Access Control.

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

Link	Providers	Tags
https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/		x_refsource_CONFIRMRelease NotesVendor Advisory
https://about.gitlab.com/blog/categories/releases/		x_refsource_MISCRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8880		Advisory
https://gitlab.com/gitlab-org/gitlab/issues/12219		x_refsource_MISCBroken LinkVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 3, 2020

Updated Aug 5, 2024

Reserved Nov 25, 2019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jan 3, 2020

Updated Aug 5, 2024

GitHub

No data