Linux Distros Unpatched Vulnerability : CVE-2019-15592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via t...

CVE-2019-15592

GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline...

CVE-2019-15592

CVE-2019-15592 concerns GitLab (versions 12.2.2 and earlier) where a guest user in a private project can see the merge request ID linked to an issue via the activity timeline. The underlying issue is an access-control exposure within the activity feed that reveals issue/merge request associations...