CVE-2019-15729: High severity gitlab vulnerability
Published Sep 17, 2019
·Updated
An issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An internal endpoint unintentionally disclosed information about the last pipeline that ran for a merge request.
Affected Software
6 affected components
GitLab GitLab>=9.0.0<12.0.8
GitLab GitLab>=9.0.0<12.0.8
GitLab GitLab>=12.1.0<12.1.8
GitLab GitLab>=12.1.0<12.1.8
GitLab GitLab>=12.2.0<12.2.3
GitLab GitLab>=12.2.0<12.2.3
Event History
Sep 17, 2019
CVE Published
via MITRE·02:34 PM
Data Sourced
via MITRE·02:34 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-15729?
CVE-2019-15729 has been assigned a medium severity rating due to its potential exploitation to disclose sensitive information.
2
How do I fix CVE-2019-15729?
To fix CVE-2019-15729, users should upgrade GitLab Community or Enterprise Edition to version 12.2.3 or later.
3
What versions of GitLab are affected by CVE-2019-15729?
CVE-2019-15729 affects GitLab versions from 8.18 through 12.2.1.
4
What type of information was disclosed by CVE-2019-15729?
CVE-2019-15729 disclosed information about the last pipeline that ran for a merge request.
5
Is CVE-2019-15729 a remote code execution vulnerability?
No, CVE-2019-15729 is not a remote code execution vulnerability but rather an information disclosure issue.