CVE-2019-11000

2019-05-1020:29:00

Google

osv.dev

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.1%

JSON

An issue was discovered in GitLab Enterprise Edition before 11.7.11, 11.8.x before 11.8.7, and 11.9.x before 11.9.7. It allows Information Disclosure.

CPENameOperatorVersion
gitlabeq11.9.4-ee
gitlabeq11.9.5-ee
gitlabeq11.9.0-ee
gitlabeq11.9.6-ee
gitlabeq11.9.1-ee

Name	Operator	Version
gitlab	eq	11.9.4-ee
gitlab	eq	11.9.5-ee
gitlab	eq	11.9.0-ee
gitlab	eq	11.9.6-ee
gitlab	eq	11.9.1-ee

References

www.securityfocus.com/bid/108301

about.gitlab.com/2019/04/10/critical-security-release-gitlab-11-dot-9-dot-7-released/

about.gitlab.com/blog/categories/releases/