CVE-2019-12429

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-12429
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-12429.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-12429
Published
2020-03-10T14:15:11.567Z
Modified
2026-04-01T23:09:03.301103Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in GitLab Community and Enterprise Edition 11.9 through 11.11. Unprivileged users were able to access labels, status and merge request counts of confidential issues via the milestone details page. It has Improper Access Control.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
2f3536bdda88ae962d4f67ced68af6efd82254f1
Last affected
deb6f84e91fe4d21daa6b5558c517254ea2668a3
Introduced
2f3536bdda88ae962d4f67ced68af6efd82254f1
Last affected
deb6f84e91fe4d21daa6b5558c517254ea2668a3
Database specific 
{
    "versions": [
        {
            "introduced": "11.9.0"
        },
        {
            "last_affected": "11.11.0"
        },
        {
            "introduced": "11.9.0"
        },
        {
            "last_affected": "11.11.0"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-12429.json"