CVE-2019-9223

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1 (CVE-2019-9223)

Description

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows Information Exposure.

Source: CVELISTV5 NVD

Metrics

Severity

high

85.07

—

no public PoC known

7.5

Source: nvd-v3

CVSS v3

7.5

CVSS v4

—

EPSS percentile

79.3 %

High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).

EPSS score

2.0 %

Moderate — model estimates 1-10% exploitation likelihood.

Published

2019-04-17 16:50 UTC

CWE

—

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

gitlab
gitlab11.7.0 – 11.7.6
gitlab
gitlab11.8.0 – 11.8.1
gitlab
gitlab11.6.10

References & sources

IDCVE-2019-9223