CVE-2019-6797

An information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitHub token used in CI/CD for External Repos was being leaked to project maintainers in the UI.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-05-17

Last modified

2024-08-04

Affected products

• Gitlab (Gitlab)

References

• https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/
• https://about.gitlab.com/blog/categories/releases/