CVE-2019-5465
published 2020-01-28CVE-2019-5465: An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly…
PriorityP417medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
1.13%
62.6th percentile
An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 12.6.8-3 (sid) | gitlab 12.6.8-3 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 8.14.0 < 11.11.7 | 11.11.7 |
| gitlab | gitlab_ce | — | — |
| gitlab | gitlab_ce_ee | — | — |
| gitlab | gitlab_ce_ee | — | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
vendor_debian4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-29qv-5fpp-cv72: An information disclosure issue was discovered in GitLab CE/EE 8
ghsa_unreviewed·2022-05-24
CVE-2019-5465 [MEDIUM] GHSA-29qv-5fpp-cv72: An information disclosure issue was discovered in GitLab CE/EE 8
An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID.
GitLab
CVE-2019-5465: An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the
vendor_gitlab·2020-01-28·CVSS 4.3
CVE-2019-5465 [MEDIUM] CWE-200 CVE-2019-5465: An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the
CVE-2019-5465: An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID.
Debian
CVE-2019-5465: gitlab - An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, b...
vendor_debian·2019·CVSS 4.3
CVE-2019-5465 [MEDIUM] CVE-2019-5465: gitlab - An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, b...
An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID.
Scope: local
sid: resolved (fixed in 12.6.8-3)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/https://gitlab.com/gitlab-org/gitlab-ce/issues/62070https://hackerone.com/reports/584534https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/https://gitlab.com/gitlab-org/gitlab-ce/issues/62070https://hackerone.com/reports/584534
2020-01-28
Published