VULNERABILITY INTELLIGENCE

CVE-2019-5469

CVSS score6.5 MEDIUM

EPSS probability0.77%

CISA KEVNot currently listed

Published2019-12-18

Last modified2026-06-17

Description

An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets.