Unrated severityNVD Advisory· Published Apr 15, 2023· Updated Feb 6, 2025

CVE-2019-14942

Description

An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Cookies for GitLab Pages (which have access control) could be sent over cleartext HTTP.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GitLab/GitLab Community and Enterprise Editiondescription
GitLab Inc./GitLabllm-fuzzy
Range: <11.11.8 || >=12.0.0 <12.0.6 || >=12.1.0 <12.1.6
osv-coords4 versions
pkg:apk/chainguard/gitlab-operator pkg:apk/chainguard/gitlab-operator-charts pkg:apk/chainguard/gitlab-operator-compat pkg:apk/chainguard/gitlab-operator-fips
< 0+ 3 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0

Patches

Vulnerability mechanics

References

about.gitlab.com/blog/categories/releases/mitre
about.gitlab.com/releases/2019/08/12/critical-security-release-gitlab-12-dot-1-dot-6-released/mitre
gitlab.com/gitlab-org/gitlab-pages/issues/232mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000