CVE-2019-18449

4.3

MEDIUMCVSS v3

Published

November 26, 2019

CVSS v2

4 MEDIUM

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the autocomplete feature. It has Insecure Permissions (issue 2 of 2).

gitlab

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

<= 12.4.0NVD

@semantic-release/gitlab

NPMsemantic-release plugin to publish a GitLab release

<= 12.4.0NVD

semantic-release/gitlab

GitHub

More on this CVE

NVD↗GitHub Advisory↗

:fox_face: semantic-release plugin to publish a GitLab release

<= 12.4.0NVD

gitlab

Python Package IndexGet GitLab user Details

<= 12.4.0NVD

gitlab

Crates.ioGitlab API client.

<= 12.4.0NVD

gitlab

RubyGemsRuby client and CLI for GitLab API

<= 12.4.0NVD

NARKOZ/gitlab

GitHubRuby wrapper and CLI for the GitLab REST API

<= 12.4.0NVD

Security Advisories

CVE-2019-18449

Description

More on this CVE