MEDIUM

CVE-2019-5463

Gitlab GitLab 2019-09-09 CVSS v3.1

CVSS

5.3

Description

An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.

Weakness (CWE)

CWE-200 Information Exposure

CWE-862 Missing Authorization

EPSS Score

1.91%

Probability of exploitation in next 30 days

78.9th percentile

References

https://gitlab.com/gitlab-org/gitlab-ce/issues/56407 Third Party Advisory https://hackerone.com/reports/477222 Exploit, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE