High severity8.8NVD Advisory· Published Mar 10, 2020· Updated Jun 17, 2026
CVE-2019-12430
CVE-2019-12430
Description
An issue was discovered in GitLab Community and Enterprise Edition 11.11. A specially crafted payload would allow an authenticated malicious user to execute commands remotely through the repository download feature. It allows Command Injection.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:gitlab:gitlab:11.11.0:*:*:*:community:*:*:*+ 1 more
- cpe:2.3:a:gitlab:gitlab:11.11.0:*:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.11.0:*:*:*:enterprise:*:*:*
- GitLab/GitLab Community and Enterprise Editiondescription
- Range: <11.11.1
- Range: <11.11.1
Patches
Vulnerability mechanics
References
2- about.gitlab.com/blog/categories/releases/nvdRelease NotesVendor Advisory
- about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.