CVE-2019-16170

7.1

HIGHCVSS v3

Published

September 16, 2019

CVSS v2

5.5 MEDIUM

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5. It has Incorrect Access Control.

gitlab

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

>= 12.2.0, < 12.2.5, >= 12.1.0, < 12.1.9, >= 11.6.0, < 12.0.9NVD

@semantic-release/gitlab

NPMsemantic-release plugin to publish a GitLab release

>= 12.2.0, < 12.2.5, >= 12.1.0, < 12.1.9, >= 11.6.0, < 12.0.9NVD

semantic-release/gitlab

GitHub

More on this CVE

NVD↗GitHub Advisory↗

:fox_face: semantic-release plugin to publish a GitLab release

>= 12.2.0, < 12.2.5, >= 12.1.0, < 12.1.9, >= 11.6.0, < 12.0.9NVD

gitlab

Python Package IndexGet GitLab user Details

>= 12.2.0, < 12.2.5, >= 12.1.0, < 12.1.9, >= 11.6.0, < 12.0.9NVD

gitlab

Crates.ioGitlab API client.

>= 12.2.0, < 12.2.5, >= 12.1.0, < 12.1.9, >= 11.6.0, < 12.0.9NVD

gitlab

RubyGemsRuby client and CLI for GitLab API

>= 12.2.0, < 12.2.5, >= 12.1.0, < 12.1.9, >= 11.6.0, < 12.0.9NVD

NARKOZ/gitlab

GitHubRuby wrapper and CLI for the GitLab REST API

>= 12.2.0, < 12.2.5, >= 12.1.0, < 12.1.9, >= 11.6.0, < 12.0.9NVD

Security Advisories

CVE-2019-16170

Description

More on this CVE