CVE-2019-18460: Infoleak
Published Nov 26, 2019
·Updated
An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4 in the Comments Search feature provided by the Elasticsearch integration. It has Incorrect Access Control.
Affected Software
2 affected components
GitLab GitLab>=8.15.0<=12.4.0
GitLab GitLab>=8.15.0<=12.4.0
Event History
Nov 26, 2019
CVE Published
via MITRE·02:47 PM
Data Sourced
via MITRE·02:47 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-18460?
CVE-2019-18460 has been classified as a high-severity vulnerability due to incorrect access control in GitLab.
2
How do I fix CVE-2019-18460?
To fix CVE-2019-18460, upgrade GitLab to version 12.4.1 or later.
3
What versions of GitLab are affected by CVE-2019-18460?
CVE-2019-18460 affects GitLab Community and Enterprise Editions from version 8.15 to 12.4.
4
What type of vulnerability is CVE-2019-18460?
CVE-2019-18460 is an access control vulnerability impacting the Comments Search feature in GitLab.
5
Does CVE-2019-18460 affect all users of GitLab?
CVE-2019-18460 primarily affects GitLab users who utilize the Elasticsearch integration for Comments Search.