CVE-2019-14942

MEDIUM

GitLab < 11.11.8, 12 < 12.0.6, 12.1 < 12.1.6 - Cleartext Transmission of Sensitive Information via GitLab Pages Cookies

Title source: llm
STIX 2.1

Description

An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Cookies for GitLab Pages (which have access control) could be sent over cleartext HTTP.

References (3)

Core 3

Scores

CVSS v3 5.9
EPSS 0.0011
EPSS Percentile 28.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-319
Status published
Products (1)
gitlab/gitlab < 11.11.8 (2 CPE variants)
Published Apr 16, 2023
Tracked Since Feb 18, 2026