Lucene search

K
osvGoogleOSV:CVE-2019-5487
HistoryDec 18, 2019 - 9:15 p.m.

CVE-2019-5487

2019-12-1821:15:14
Google
osv.dev
1

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.4%

An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits.

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.4%