Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-5466

An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hackerone

Description

An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a GitLab CE/EE

  • Affects GitLab CE/EE 11.5 and lateraffected
  • Fixed in 12.1.2 in 12.0.4 and in 11.11.6affected

References