What is CVE-2019-18460?

CVE-2019-18460 is a high-severity vulnerability in GitLab, classified under Information Disclosure. CVSS score: 7.5/10. Published 2019-11-26.

How severe is CVE-2019-18460?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in GitLab

CVE-2019-18460

An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4 in the Comments Search feature provided by the Elasticsearch integration. It has Incorrect Access Control.

Vulnerability class: Information Disclosure

EPSS: 0.012 (63.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Gitlab
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_MISC, Release Notes, Vendor Advisory)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-18460?: CVE-2019-18460 is a high-severity vulnerability in GitLab, classified under Information Disclosure. CVSS score: 7.5/10. Published 2019-11-26.
How severe is CVE-2019-18460?: High severity. CVSS v3 base score is 7.5 out of 10.