← All advisories

Medium severity4.3NVD Advisory· Published Feb 14, 2020· Updated Jun 17, 2026

CVE-2019-15594

CVE-2019-15594

Description

GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

GitLab Inc./GitLab2 versions
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*+ 1 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: <=11.8
- (no CPE)range: >=11.8
GitLab/GitLabdescription

Patches

Vulnerability mechanics

References

2

about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/nvdVendor Advisory
hackerone.com/reports/507064nvdPermissions Required

News mentions

0

No linked articles in our index yet.