Description
In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch integration.
Unscored
CVE-2019-19629
EUVD-2019-9240GHSA-9338-7cq4-hm8v
In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclose…
Published Jan 5, 2020 · Updated Aug 5, 2024 · Assigned by mitre