CVE-2019-6792

MEDIUM

GitLab 8.9.0-11.5.7, 11.6.0-11.6.5, 11.7.0 - Path Disclosure via Project Import Error Message

Title source: llm
STIX 2.1

Description

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Path Disclosure. When an error is encountered on project import, the error message will display instance internal information.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_confirm
https://gitlab.com/gitlab-org/gitlab-ce/issues/54867

Scores

CVSS v3 5.3
EPSS 0.0026
EPSS Percentile 49.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-209
Status published
Products (1)
gitlab/gitlab 8.9.0 - 11.5.8 (2 CPE variants)
Published Sep 09, 2019
Tracked Since Feb 18, 2026