CVE-2019-18456: Medium severity gitlab vulnerability
Published Nov 26, 2019
·Updated
An issue was discovered in GitLab Community and Enterprise Edition 8.17 through 12.4 in the Search feature provided by Elasticsearch integration.. It has Insecure Permissions (issue 1 of 4).
Affected Software
2 affected components
GitLab GitLab>=8.17.0<=12.4.0
GitLab GitLab>=8.17.0<=12.4.0
Event History
Nov 26, 2019
CVE Published
via MITRE·04:04 PM
Data Sourced
via MITRE·04:04 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-18456?
CVE-2019-18456 has been classified with a moderate severity due to insecure permissions in the search feature.
2
How do I fix CVE-2019-18456?
To fix CVE-2019-18456, upgrade your GitLab Community or Enterprise Edition to version 12.4.1 or later.
3
Which versions of GitLab are affected by CVE-2019-18456?
CVE-2019-18456 affects GitLab Community and Enterprise Editions from version 8.17.0 to 12.4.0.
4
What type of vulnerability is CVE-2019-18456?
CVE-2019-18456 is classified as an Insecure Permissions vulnerability.
5
What feature in GitLab is impacted by CVE-2019-18456?
CVE-2019-18456 impacts the Search feature provided by Elasticsearch integration in GitLab.