Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-15725

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. An IDOR in the epic notes API that could result in disclosure of private milestones, labels, and other information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2019-15725
  • Gitlab » Gitlab » Version: 12.0.0
    cpe:2.3:a:gitlab:gitlab:12.0.0
  • Gitlab » Gitlab » Version: 12.0.1
    cpe:2.3:a:gitlab:gitlab:12.0.1
  • Gitlab » Gitlab » Version: 12.0.2
    cpe:2.3:a:gitlab:gitlab:12.0.2
  • Gitlab » Gitlab » Version: 12.0.3
    cpe:2.3:a:gitlab:gitlab:12.0.3
  • Gitlab » Gitlab » Version: 12.0.4
    cpe:2.3:a:gitlab:gitlab:12.0.4
  • Gitlab » Gitlab » Version: 12.0.5
    cpe:2.3:a:gitlab:gitlab:12.0.5
  • Gitlab » Gitlab » Version: 12.0.6
    cpe:2.3:a:gitlab:gitlab:12.0.6
  • Gitlab » Gitlab » Version: 12.0.7
    cpe:2.3:a:gitlab:gitlab:12.0.7
  • Gitlab » Gitlab » Version: 12.1.0
    cpe:2.3:a:gitlab:gitlab:12.1.0
  • Gitlab » Gitlab » Version: 12.1.1
    cpe:2.3:a:gitlab:gitlab:12.1.1
  • Gitlab » Gitlab » Version: 12.1.2
    cpe:2.3:a:gitlab:gitlab:12.1.2
  • Gitlab » Gitlab » Version: 12.1.3
    cpe:2.3:a:gitlab:gitlab:12.1.3
  • Gitlab » Gitlab » Version: 12.1.4
    cpe:2.3:a:gitlab:gitlab:12.1.4
  • Gitlab » Gitlab » Version: 12.1.5
    cpe:2.3:a:gitlab:gitlab:12.1.5
  • Gitlab » Gitlab » Version: 12.1.6
    cpe:2.3:a:gitlab:gitlab:12.1.6
  • Gitlab » Gitlab » Version: 12.2.0
    cpe:2.3:a:gitlab:gitlab:12.2.0
  • Gitlab » Gitlab » Version: 12.2.1
    cpe:2.3:a:gitlab:gitlab:12.2.1
  • Gitlab » Gitlab » Version: 12.2.2
    cpe:2.3:a:gitlab:gitlab:12.2.2


Contact Us

Shodan ® - All rights reserved