CVE-2019-19314

HIGH

GitLab EE <12.5-12.3.6 - Info Disclosure

Title source: llm

GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.

Core 3

Core References

Release Notes x_refsource_misc

Broken Link x_refsource_misc

Vendor Advisory x_refsource_confirm

CVSS v3 7.5

EPSS 0.0006

EPSS Percentile 18.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-312

Status published

Products (1)

gitlab/gitlab 8.4.0 - 12.3.8

Published Jan 05, 2020

Tracked Since Feb 18, 2026