CVE-2019-5462

2020-01-2802:17:12

hackerone

www.cve.org

AI Score

8.8

Confidence

High

EPSS

0.004

Percentile

73.2%

JSON

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed.

CNA Affected

[
  {
    "product": "GitLab Community Edition and GitLab Enterprise Edition",
    "vendor": "GitLab",
    "versions": [
      {
        "status": "affected",
        "version": "Affects GitLab CE/EE 9.0 and later"
      },
      {
        "status": "affected",
        "version": "Fixed in 12.1.2 in 12.0.4 and in 11.11.6"
      }
    ]
  }
]