Medium severity6.5NVD Advisory· Published Apr 16, 2023· Updated Jun 17, 2026
CVE-2019-14944
CVE-2019-14944
Description
An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Gitaly allows injection of command-line flags. This sometimes leads to privilege escalation or remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- GitLab/GitLab Community and Enterprise Editiondescription
- osv-coords4 versionspkg:apk/chainguard/gitlab-operator-fipspkg:apk/chainguard/gitlab-operatorpkg:apk/chainguard/gitlab-operator-chartspkg:apk/chainguard/gitlab-operator-compat
< 0+ 3 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- Range: <11.11.8
- Range: <11.11.8
cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 1 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: <11.11.8
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: <11.11.8
Patches
Vulnerability mechanics
References
4- gitlab.com/gitlab-org/gitaly/issues/1801nvdExploitIssue TrackingVendor Advisory
- about.gitlab.com/releases/2019/08/12/critical-security-release-gitlab-12-dot-1-dot-6-released/nvdVendor Advisory
- about.gitlab.com/blog/categories/releases/nvdRelease Notes
- gitlab.com/gitlab-org/gitaly/issues/1802nvdBroken Link
News mentions
0No linked articles in our index yet.