CVE-2019-15577

An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed project milestones to be disclosed via groups browsing.
References
Link Resource
https://hackerone.com/reports/636560 Exploit Issue Tracking
Configurations

Configuration 1

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

Information

Published : 2019-12-18 09:15

Updated : 2021-11-02 05:52


NVD link : CVE-2019-15577

Mitre link : CVE-2019-15577

Products Affected
No products.
CWE
CWE-307

Improper Restriction of Excessive Authentication Attempts