HIGH
CVE-2019-15576
CVSS
7.5
Description
An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to view private system notes from a GraphQL endpoint.
Weakness (CWE)
CWE-200
Information Exposure
CWE-862
Missing Authorization
EPSS Score
1.85%
Probability of exploitation in next 30 days
78.2th percentile
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.