CVE-2019-11544: Medium severity gitlab vulnerability
An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It allows Information Disclosure. Non-member users who subscribe to notifications of an internal project with issue and repository restrictions will receive emails about restricted events.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11544?
The severity of CVE-2019-11544 is classified as medium, allowing information disclosure for non-member users.
How do I fix CVE-2019-11544?
To fix CVE-2019-11544, upgrade your GitLab instance to version 11.8.9 or later, 11.9.10 or later, or 11.10.2 or later.
Which versions of GitLab are affected by CVE-2019-11544?
CVE-2019-11544 affects GitLab Community and Enterprise Edition versions 8.x through 11.x before the stated fixed versions.
What kind of information can be disclosed by CVE-2019-11544?
CVE-2019-11544 allows unauthorized users to access notifications related to internal projects, potentially exposing sensitive project details.
Is there a vulnerability report for CVE-2019-11544?
Yes, detailed information about CVE-2019-11544 can be found in the GitLab security release notes and issue tracker.