Skip to content
OpenAdvisories
Unscored CVE-2019-5462 EUVD-2019-15044GHSA-qg3j-4m32-rxh8

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has ch…

Published Jan 28, 2020 · Updated Aug 4, 2024 · Assigned by hackerone

Vendor: GitLab Product: GitLab Community Edition and GitLab Enterprise Edition Category: Web / CMS

Description

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed.

Affected products

VendorProductAffectedFixed
GitLab GitLab Community Edition and GitLab Enterprise Edition Affects GitLab CE/EE 9.0 and later, Fixed in 12.1.2 in 12.0.4 and in 11.11.6 —

References