CVE-2019-19312

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project changed to private, previously forked repositories were...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project changed to private, previously forked repositories were still able to get information about the private project through the API.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory about.gitlab.com
advisory about.gitlab.com
report gitlab.com