CVE-2019-13009

An issue was discovered in GitLab Community and Enterprise Edition 9.2 through 12.0.2. Uploaded files associated with unsaved personal snippets were accessible to unauthorized users due to improper permission settings. It has Incorrect Access Control.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2020-03-10

Last modified

2024-08-04

Weaknesses

CWE-400, CWE-732

Affected products

• Gitlab (Gitlab)

References

• https://about.gitlab.com/blog/categories/releases/
• https://about.gitlab.com/releases/2019/07/03/security-release-gitlab-12-dot-0-dot-3-released/