CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2020/03/10 2:15 p.m.•12 views

CVE-2019-12431

An issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Restricted users could access the metadata of private milestones through the Search API. It has Improper Access Control...

4.3CVSS6.5AI score0.00751EPSS

Exploits0References2

NVD•added 2020/03/10 2:15 p.m.•19 views

CVE-2019-12431

4.3CVSS4.7AI score0.00751EPSS

Exploits0References2

CVE•added 2020/03/10 1:41 p.m.•57 views

CVE-2019-12431

Affected software: GitLab Community and Enterprise Edition 8.13–11.11. The issue is improper access control where restricted users could access metadata for private milestones via the Search API, exposing sensitive milestone data. Root cause: improper access control. Impact: information disclosur...

4.3CVSS4.6AI score0.00751EPSS

Exploits0References2Affected Software1