CVE-2019-15734: Infoleak
An issue was discovered in GitLab Community and Enterprise Edition 8.6 through 12.2.1. Under very specific conditions, commit titles and team member comments could become viewable to users who did not have permission to access these.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-15734?
The severity of CVE-2019-15734 is classified as medium due to unauthorized access to certain commit titles and comments under specific conditions.
Who is affected by CVE-2019-15734?
CVE-2019-15734 affects users of GitLab Community and Enterprise Editions versions 8.6 through 12.2.1.
How do I fix CVE-2019-15734?
To fix CVE-2019-15734, update your GitLab installation to version 12.2.3 or later.
What are the potential impacts of CVE-2019-15734?
The potential impacts of CVE-2019-15734 include unauthorized visibility of commit titles and team member comments.
Is there a workaround for CVE-2019-15734?
There are no specific workarounds for CVE-2019-15734; upgrading is the recommended action.