VULNERABILITY INTELLIGENCE

CVE-2019-13006

CVSS score4.3 MEDIUM

EPSS probability0.77%

CISA KEVNot currently listed

Published2020-03-10

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

An issue was discovered in GitLab Community and Enterprise Edition 9.0 and through 12.0.2. Users with access to issues, but not the repository were able to view the number of related merge requests on an issue. It has Incorrect Access Control.

Primary references

cve@mitre.org — Release Notes, Vendor Advisory
cve@mitre.org — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory