Vulnerability Details CVE-2019-5469
An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.8%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 5.5
Products affected by CVE-2019-5469
-
cpe:2.3:a:gitlab:gitlab:11.11.0
-
cpe:2.3:a:gitlab:gitlab:11.11.1
-
cpe:2.3:a:gitlab:gitlab:11.11.2
-
cpe:2.3:a:gitlab:gitlab:11.11.3
-
cpe:2.3:a:gitlab:gitlab:11.11.4
-
cpe:2.3:a:gitlab:gitlab:11.11.5
-
cpe:2.3:a:gitlab:gitlab:12.0.0
-
cpe:2.3:a:gitlab:gitlab:12.0.1
-
cpe:2.3:a:gitlab:gitlab:12.0.2
-
cpe:2.3:a:gitlab:gitlab:12.0.3
-
cpe:2.3:a:gitlab:gitlab:12.1.0
-
cpe:2.3:a:gitlab:gitlab:12.1.1