CVE-2019-5463

Summary

An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.

Affected Software

VendorProductVersion RangeStatus
n/aGitLab CE/EEAffects all previous GitLab CE/EE versions. Fixed in 12.1.2, 12.0.4, and 11.11.6affected

Weaknesses

  • CWE-200: Information Disclosure (CWE-200)

ADP Enrichment

CVE Program Container

Additional References

References