CVE-2019-6782: High severity gitlab vulnerability
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 1 of 6). An authorization issue allows the contributed project information of a private profile to be viewed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-6782?
CVE-2019-6782 has a medium severity level due to its potential for information disclosure in private GitLab profiles.
How do I fix CVE-2019-6782?
To resolve CVE-2019-6782, you should upgrade GitLab to version 11.5.8 or later, 11.6.6 or later, or 11.7.1 or later.
What specific issue does CVE-2019-6782 address?
CVE-2019-6782 addresses an authorization issue that allows unauthorized viewing of contributed project information in private profiles.
Which versions of GitLab are affected by CVE-2019-6782?
CVE-2019-6782 affects GitLab Community and Enterprise Editions before versions 11.5.8, 11.6.6, and 11.7.1.
Is CVE-2019-6782 exploitable by anyone?
CVE-2019-6782 can be exploited by unauthorized users to access sensitive project information if they have access to the affected GitLab versions.