CVE-2019-11544 — Sensitive Information Exposure in Gitlab
4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.1%
top 70.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 9
Latest updateMay 24
Description
An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It allows Information Disclosure. Non-member users who subscribe to notifications of an internal project with issue and repository restrictions will receive emails about restricted events.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4
Affected Packages3 packages
🔴Vulnerability Details
1GHSA▶
GHSA-r998-qhmx-fp4x: An issue was discovered in GitLab Community and Enterprise Edition 8↗2022-05-24
📋Vendor Advisories
2GitLab▶
CVE-2019-11544: An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 1↗2019-09-09
Debian▶
CVE-2019-11544: gitlab - An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10....↗2019