CVE-2019-10114: High severity gitlab vulnerability
An Information Exposure issue (issue 2 of 2) was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before 11.8.4, and 11.9.x before 11.9.2. During the OAuth authentication process, the application attempts to validate a parameter in an insecure way, potentially exposing data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10114?
The CVE-2019-10114 vulnerability is considered to have a high severity due to the potential information exposure during the OAuth authentication process.
How do I fix CVE-2019-10114?
To fix CVE-2019-10114, update your GitLab installation to version 11.7.8 or later, 11.8.4 or later, or 11.9.2 or later.
What versions of GitLab are affected by CVE-2019-10114?
CVE-2019-10114 affects GitLab Community and Enterprise Editions prior to versions 11.7.8, 11.8.4, and 11.9.2.
What kind of information is exposed due to CVE-2019-10114?
CVE-2019-10114 can potentially expose sensitive data during the OAuth authentication process due to improper validation of parameters.
Is CVE-2019-10114 publicly known?
Yes, CVE-2019-10114 is a publicly disclosed vulnerability that affects GitLab configurations.