Lucene search
PRIOn knowledge basePRION:CVE-2019-5487HistoryDec 18, 2019 - 9:15 p.m.
Improper access control
2019-12-1821:15:00
PRIOn knowledge base
www.prio-n.com
4
An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits.
References
Related
hackerone
hackerone
GitLab: Group search leaks private MRs, code, commits
2019-09-11 10:22:51
ubuntucve
ubuntucve
CVE-2019-5487
2019-12-18 00:00:00
cvelist
cvelist
CVE-2019-5487
2019-12-18 21:00:29
cve
cve
CVE-2019-5487
2019-12-18 21:15:14
debiancve
debiancve
CVE-2019-5487
2019-12-18 21:15:14
osv
osv
CVE-2019-5487
2019-12-18 21:15:14
nvd
nvd
CVE-2019-5487
2019-12-18 21:15:14