Lucene search

K
osvGoogleOSV:CVE-2019-15580
HistoryDec 18, 2019 - 9:15 p.m.

CVE-2019-15580

2019-12-1821:15:11
Google
osv.dev
3

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

An information exposure vulnerability exists in gitlab.com <v12.3.2, <v12.2.6, and <v12.1.10 when using the blocking merge request feature, it was possible for an unauthenticated user to see the head pipeline data of a public project even though pipeline visibility was restricted.

CPENameOperatorVersion
gitlabeq12.3.0-ee
gitlabeq12.3.1-ee

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%