← back
CVE-2019-13006

CVE-2019-13006

EPSS 0.8%
An issue was discovered in GitLab Community and Enterprise Edition 9.0 and through 12.0.2. Users with access to issues, but not the repository were able to view the number of related merge requests on an issue. It has Incorrect Access Control.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://about.gitlab.com/blog/categories/releases/https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/