CVE-2019-18460

CVE-2019-18460

EPSS 1.2%

An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4 in the Comments Search feature provided by the Elasticsearch integration. It has Incorrect Access Control.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://about.gitlab.com/blog/2019/10/30/security-release-gitlab-12-dot-4-dot-1-released/https://about.gitlab.com/blog/categories/releases/