MEDIUM
CVE-2019-9866
CVSS
6.5
Description
An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.7.7 and 11.8.x before 11.8.3. It allows Information Disclosure.
Summary dbcve.org
Information disclosure vulnerability in GitLab Community and Enterprise Edition affecting versions 11.x before 11.7.7 and 11.8.x before 11.8.3. The specific nature of the exposed information and attack vector are not detailed in the available description.
Mitigation
Upgrade GitLab to version 11.7.7, 11.8.3, or later to resolve the information disclosure vulnerability.
Weakness (CWE)
CWE-200
Information Exposure
EPSS Score
1.18%
Probability of exploitation in next 30 days
66.3th percentile
References
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.