Vulnerability Details CVE-2019-15731
An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non-members were able to comment on merge requests despite the repository being set to allow only project members to do so.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.6%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
Products affected by CVE-2019-15731
-
cpe:2.3:a:gitlab:gitlab:12.0.0
-
cpe:2.3:a:gitlab:gitlab:12.0.1
-
cpe:2.3:a:gitlab:gitlab:12.0.2
-
cpe:2.3:a:gitlab:gitlab:12.0.3
-
cpe:2.3:a:gitlab:gitlab:12.0.4
-
cpe:2.3:a:gitlab:gitlab:12.0.5
-
cpe:2.3:a:gitlab:gitlab:12.0.6
-
cpe:2.3:a:gitlab:gitlab:12.0.7
-
cpe:2.3:a:gitlab:gitlab:12.1.0
-
cpe:2.3:a:gitlab:gitlab:12.1.1
-
cpe:2.3:a:gitlab:gitlab:12.1.2
-
cpe:2.3:a:gitlab:gitlab:12.1.3
-
cpe:2.3:a:gitlab:gitlab:12.1.4
-
cpe:2.3:a:gitlab:gitlab:12.1.5
-
cpe:2.3:a:gitlab:gitlab:12.1.6
-
cpe:2.3:a:gitlab:gitlab:12.2.0
-
cpe:2.3:a:gitlab:gitlab:12.2.1
-
cpe:2.3:a:gitlab:gitlab:12.2.2