CVE-2019-5470: Infoleak

Q: What is the severity of CVE-2019-5470?

CVE-2019-5470 is classified as an information disclosure vulnerability that can lead to the unintended exposure of sensitive vulnerability feedback information.

Q: How do I fix CVE-2019-5470?

To fix CVE-2019-5470, users should upgrade their GitLab installations to version 12.1.2 or later, 12.0.4 or later, or 11.11.6 or later.

Q: Which versions of GitLab are affected by CVE-2019-5470?

CVE-2019-5470 affects GitLab versions prior to 12.1.2, 12.0.4, and 11.11.6.

Q: What kind of information can be disclosed due to CVE-2019-5470?

CVE-2019-5470 can disclose vulnerability feedback information, potentially exposing sensitive data to unauthorized users.

Q: Is CVE-2019-5470 specific to community or enterprise versions of GitLab?

CVE-2019-5470 affects both the community and enterprise versions of GitLab.

Published Jan 28, 2020

Updated

An information disclosure issue was discovered GitLab versions < 12.1.2, < 12.0.4, and < 11.11.6 in the security dashboard which could result in disclosure of vulnerability feedback information.

Affected Software

6 affected components

GitLab GitLab>=10.8.0<11.11.6

GitLab GitLab>=12.0.0<12.0.4

GitLab GitLab>=12.1.0<12.1.2

Remediation

Patch Available

https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/

Event History

Jan 28, 2020

CVE Published

via MITRE·02:49 AM

Data Sourced

via MITRE·02:49 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-5470?

CVE-2019-5470 is classified as an information disclosure vulnerability that can lead to the unintended exposure of sensitive vulnerability feedback information.

How do I fix CVE-2019-5470?