SUSE CVE-2019-15725

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. An IDOR in the epic notes API that could result in disclosure of private milestones, labels, and other information...

CVE-2019-15725

CVE-2019-15725 affects GitLab Community and Enterprise Edition 12.0–12.2.1. The issue is an Insecure Direct Object Reference (IDOR) in the Epic Notes API that can disclose private milestones, labels, and other information. Root cause: improper access control on epic notes data. Impact: disclosure...