Unscored CVE-2019-15576 EUVD-2019-6544GHSA-ff73-cwc3-6v5j

An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to view private s…

Published Dec 18, 2019 · Updated Aug 5, 2024 · Assigned by hackerone

Description

An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to view private system notes from a GraphQL endpoint.

Affected products

Vendor	Product	Affected	Fixed
—	GitLab CE/EE	12.3.2, 12.2.6, and 12.1.12	—

References

https://hackerone.com/reports/633001