← All advisories

High severity8.8NVD Advisory· Published Jan 28, 2020· Updated Jun 17, 2026

CVE-2019-5462

CVE-2019-5462

Description

A privilege escalation issue was discovered in GitLab CE/EE 9.0 and later when trigger tokens are not rotated once ownership of them has changed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

GitLab Inc./GitLab EE and CEllm-fuzzy
Range: >=9.0
GitLab Inc./GitLabllm-fuzzy
Range: >=9.0
GitLab Inc./GitLab Community Editioncpe-rescue
Range: Affects GitLab CE/EE 9.0 and later

Patches

Vulnerability mechanics

References

3

about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/nvdPatchRelease NotesVendor Advisory
gitlab.com/gitlab-org/gitlab-ce/issues/58312nvdExploitVendor Advisory
hackerone.com/reports/495282nvdPermissions Required

News mentions

0

No linked articles in our index yet.