Unscored CVE-2019-5487 EUVD-2019-15062GHSA-h2pr-7jw7-3ghr

An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with Ela…

Published Dec 18, 2019 · Updated Aug 4, 2024 · Assigned by hackerone

Description

An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits.

Affected products

Vendor	Product	Affected	Fixed
—	GitLab EE	12.3.3, 12.2.7, 12.1.13	—

References

https://hackerone.com/reports/692252