Lucene search

K
osvGoogleOSV:CVE-2019-15575
HistoryDec 18, 2019 - 9:15 p.m.

CVE-2019-15575

2019-12-1821:15:11
Google
osv.dev
3

7.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

A command injection exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to inject commands via the API through the blobs scope.

CPENameOperatorVersion
gitlabeq12.3.0-ee
gitlabeq12.3.1-ee

7.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%