CVE-2019-15732: Medium severity gitlab vulnerability
Published Sep 16, 2019
·Updated
An issue was discovered in GitLab Community and Enterprise Edition 12.2 through 12.2.1. The project import API could be used to bypass project visibility restrictions.
Affected Software
2 affected components
GitLab GitLab>=12.2.0<12.2.3
GitLab GitLab>=12.2.0<12.2.3
Event History
Sep 16, 2019
CVE Published
via MITRE·04:59 PM
Data Sourced
via MITRE·04:59 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-15732?
CVE-2019-15732 is classified as a high-severity vulnerability impacting GitLab versions 12.2 to 12.2.1.
2
How do I fix CVE-2019-15732?
To fix CVE-2019-15732, upgrade to GitLab Community or Enterprise Edition version 12.2.3 or later.
3
What type of vulnerability is CVE-2019-15732?
CVE-2019-15732 is an API vulnerability that allows bypassing project visibility restrictions.
4
Which versions of GitLab are affected by CVE-2019-15732?
The affected versions of GitLab for CVE-2019-15732 are from 12.2.0 to 12.2.1.
5
Who is impacted by CVE-2019-15732?
Users of GitLab Community and Enterprise Editions in the affected versions are at risk from CVE-2019-15732.