Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-15731

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non-members were able to comment on merge requests despite the repository being set to allow only project members to do so.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.6%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
Products affected by CVE-2019-15731
  • Gitlab » Gitlab » Version: 12.0.0
    cpe:2.3:a:gitlab:gitlab:12.0.0
  • Gitlab » Gitlab » Version: 12.0.1
    cpe:2.3:a:gitlab:gitlab:12.0.1
  • Gitlab » Gitlab » Version: 12.0.2
    cpe:2.3:a:gitlab:gitlab:12.0.2
  • Gitlab » Gitlab » Version: 12.0.3
    cpe:2.3:a:gitlab:gitlab:12.0.3
  • Gitlab » Gitlab » Version: 12.0.4
    cpe:2.3:a:gitlab:gitlab:12.0.4
  • Gitlab » Gitlab » Version: 12.0.5
    cpe:2.3:a:gitlab:gitlab:12.0.5
  • Gitlab » Gitlab » Version: 12.0.6
    cpe:2.3:a:gitlab:gitlab:12.0.6
  • Gitlab » Gitlab » Version: 12.0.7
    cpe:2.3:a:gitlab:gitlab:12.0.7
  • Gitlab » Gitlab » Version: 12.1.0
    cpe:2.3:a:gitlab:gitlab:12.1.0
  • Gitlab » Gitlab » Version: 12.1.1
    cpe:2.3:a:gitlab:gitlab:12.1.1
  • Gitlab » Gitlab » Version: 12.1.2
    cpe:2.3:a:gitlab:gitlab:12.1.2
  • Gitlab » Gitlab » Version: 12.1.3
    cpe:2.3:a:gitlab:gitlab:12.1.3
  • Gitlab » Gitlab » Version: 12.1.4
    cpe:2.3:a:gitlab:gitlab:12.1.4
  • Gitlab » Gitlab » Version: 12.1.5
    cpe:2.3:a:gitlab:gitlab:12.1.5
  • Gitlab » Gitlab » Version: 12.1.6
    cpe:2.3:a:gitlab:gitlab:12.1.6
  • Gitlab » Gitlab » Version: 12.2.0
    cpe:2.3:a:gitlab:gitlab:12.2.0
  • Gitlab » Gitlab » Version: 12.2.1
    cpe:2.3:a:gitlab:gitlab:12.2.1
  • Gitlab » Gitlab » Version: 12.2.2
    cpe:2.3:a:gitlab:gitlab:12.2.2


Contact Us

Shodan ® - All rights reserved