CVE-2019-15591

An improper access control vulnerability exists in GitLab <12.3.3 that allows an attacker to obtain container and dependency scanning reports through the merge request widget even though public pipelines were disabled.

Score

CVSS 3.1 6.5 Medium

Status

Modified - support@hackerone.com

Published

2019-12-18

Last modified

2024-08-05

Weaknesses

CWE-284

Affected products

• Gitlab (Gitlab)

References

• https://hackerone.com/reports/676976