CVE-2019-15590

An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An access control issue exists in < 12.3.5, < 12.2.8, and < 12.1.14 for GitLab Community Edition (CE) and Enterprise Edition (EE) where private merge requests and issues would be disclosed with the Group Search feature provided by Elasticsearch integration

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory about.gitlab.com
report hackerone.com