CVE-2019-15736

7.5

HIGHCVSS v3

Published

September 16, 2019

CVSS v2

5 MEDIUM

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Under certain circumstances, CI pipelines could potentially be used in a denial of service attack.

gitlab

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, < 12.0.8NVD

@semantic-release/gitlab

NPMsemantic-release plugin to publish a GitLab release

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, < 12.0.8NVD

semantic-release/gitlab

GitHub

More on this CVE

NVD↗GitHub Advisory↗

:fox_face: semantic-release plugin to publish a GitLab release

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, < 12.0.8NVD

gitlab

Python Package IndexGet GitLab user Details

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, < 12.0.8NVD

gitlab

Crates.ioGitlab API client.

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, < 12.0.8NVD

gitlab

RubyGemsRuby client and CLI for GitLab API

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, < 12.0.8NVD

NARKOZ/gitlab

GitHubRuby wrapper and CLI for the GitLab REST API

>= 12.2.0, < 12.2.3, >= 12.1.0, < 12.1.8, < 12.0.8NVD

Security Advisories

CVE-2019-15736

Description

More on this CVE