CVE-2019-15738

MEDIUM

GitLab 12.0-12.2.1 - Unauthorized Exposure of Merge Request IDs via Email

Title source: llm
STIX 2.1

Description

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Under certain conditions, merge request IDs were being disclosed via email.

References (2)

Core 2
Core References

Scores

CVSS v3 5.3
EPSS 0.0026
EPSS Percentile 49.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
gitlab/gitlab 12.0.0 - 12.0.8 (2 CPE variants)
Published Sep 16, 2019
Tracked Since Feb 18, 2026