Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-13001

An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.8%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
Products affected by CVE-2019-13001
  • Gitlab » Gitlab » Version: 11.10
    cpe:2.3:a:gitlab:gitlab:11.10
  • Gitlab » Gitlab » Version: 11.10.0
    cpe:2.3:a:gitlab:gitlab:11.10.0
  • Gitlab » Gitlab » Version: 11.10.1
    cpe:2.3:a:gitlab:gitlab:11.10.1
  • Gitlab » Gitlab » Version: 11.10.2
    cpe:2.3:a:gitlab:gitlab:11.10.2
  • Gitlab » Gitlab » Version: 11.10.3
    cpe:2.3:a:gitlab:gitlab:11.10.3
  • Gitlab » Gitlab » Version: 11.10.4
    cpe:2.3:a:gitlab:gitlab:11.10.4
  • Gitlab » Gitlab » Version: 11.10.5
    cpe:2.3:a:gitlab:gitlab:11.10.5
  • Gitlab » Gitlab » Version: 11.10.6
    cpe:2.3:a:gitlab:gitlab:11.10.6
  • Gitlab » Gitlab » Version: 11.10.7
    cpe:2.3:a:gitlab:gitlab:11.10.7
  • Gitlab » Gitlab » Version: 11.10.8
    cpe:2.3:a:gitlab:gitlab:11.10.8
  • Gitlab » Gitlab » Version: 11.11
    cpe:2.3:a:gitlab:gitlab:11.11
  • Gitlab » Gitlab » Version: 11.11.0
    cpe:2.3:a:gitlab:gitlab:11.11.0
  • Gitlab » Gitlab » Version: 11.11.1
    cpe:2.3:a:gitlab:gitlab:11.11.1
  • Gitlab » Gitlab » Version: 11.11.2
    cpe:2.3:a:gitlab:gitlab:11.11.2
  • Gitlab » Gitlab » Version: 11.11.3
    cpe:2.3:a:gitlab:gitlab:11.11.3
  • Gitlab » Gitlab » Version: 11.11.4
    cpe:2.3:a:gitlab:gitlab:11.11.4
  • Gitlab » Gitlab » Version: 11.11.5
    cpe:2.3:a:gitlab:gitlab:11.11.5
  • Gitlab » Gitlab » Version: 11.11.6
    cpe:2.3:a:gitlab:gitlab:11.11.6
  • Gitlab » Gitlab » Version: 11.11.7
    cpe:2.3:a:gitlab:gitlab:11.11.7
  • Gitlab » Gitlab » Version: 11.11.8
    cpe:2.3:a:gitlab:gitlab:11.11.8
  • Gitlab » Gitlab » Version: 11.13.14
    cpe:2.3:a:gitlab:gitlab:11.13.14
  • Gitlab » Gitlab » Version: 11.9.0
    cpe:2.3:a:gitlab:gitlab:11.9.0
  • Gitlab » Gitlab » Version: 11.9.1
    cpe:2.3:a:gitlab:gitlab:11.9.1
  • Gitlab » Gitlab » Version: 11.9.10
    cpe:2.3:a:gitlab:gitlab:11.9.10
  • Gitlab » Gitlab » Version: 11.9.11
    cpe:2.3:a:gitlab:gitlab:11.9.11
  • Gitlab » Gitlab » Version: 11.9.12
    cpe:2.3:a:gitlab:gitlab:11.9.12
  • Gitlab » Gitlab » Version: 11.9.2
    cpe:2.3:a:gitlab:gitlab:11.9.2
  • Gitlab » Gitlab » Version: 11.9.3
    cpe:2.3:a:gitlab:gitlab:11.9.3
  • Gitlab » Gitlab » Version: 11.9.4
    cpe:2.3:a:gitlab:gitlab:11.9.4
  • Gitlab » Gitlab » Version: 11.9.5
    cpe:2.3:a:gitlab:gitlab:11.9.5
  • Gitlab » Gitlab » Version: 11.9.6
    cpe:2.3:a:gitlab:gitlab:11.9.6
  • Gitlab » Gitlab » Version: 11.9.7
    cpe:2.3:a:gitlab:gitlab:11.9.7
  • Gitlab » Gitlab » Version: 11.9.8
    cpe:2.3:a:gitlab:gitlab:11.9.8
  • Gitlab » Gitlab » Version: 11.9.9
    cpe:2.3:a:gitlab:gitlab:11.9.9
  • Gitlab » Gitlab » Version: 12.0
    cpe:2.3:a:gitlab:gitlab:12.0
  • Gitlab » Gitlab » Version: 12.0.0
    cpe:2.3:a:gitlab:gitlab:12.0.0
  • Gitlab » Gitlab » Version: 12.0.1
    cpe:2.3:a:gitlab:gitlab:12.0.1
  • Gitlab » Gitlab » Version: 12.0.2
    cpe:2.3:a:gitlab:gitlab:12.0.2


Contact Us

Shodan ® - All rights reserved