CVE-2019-6797: High severity gitlab vulnerability
An information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitHub token used in CI/CD for External Repos was being leaked to project maintainers in the UI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-6797?
CVE-2019-6797 is classified with a medium severity due to potential information disclosure risks.
How do I fix CVE-2019-6797?
To fix CVE-2019-6797, upgrade your GitLab Enterprise Edition to version 11.5.8 or 11.6.6 or later.
Who is affected by CVE-2019-6797?
GitLab Enterprise Edition versions prior to 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1 are affected by CVE-2019-6797.
What type of vulnerability is CVE-2019-6797?
CVE-2019-6797 is an information disclosure vulnerability specifically related to GitHub tokens in CI/CD.
What was leaked in CVE-2019-6797?
CVE-2019-6797 involved the leakage of GitHub tokens used in CI/CD for external repositories to project maintainers in the GitLab UI.