CVE-2019-19628

2020-01-0522:15:11

Google

osv.dev

8.1 High

AI Score

Confidence

Low

0.03 Low

EPSS

Percentile

90.9%

JSON

In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry could lead to privilege escalation and remote code execution vulnerabilities under certain conditions.

CPENameOperatorVersion
gitlabeq12.4.3-ee
gitlabeq12.4.0-ee
gitlabeq12.5.3-ee
gitlabeq12.4.4-ee
gitlabeq12.5.2-ee
gitlabeq12.4.5-ee
gitlabeq12.5.1-ee
gitlabeq12.4.2-ee
gitlabeq12.5.0-ee
gitlabeq12.4.1-ee

Name	Operator	Version
gitlab	eq	12.4.3-ee
gitlab	eq	12.4.0-ee
gitlab	eq	12.5.3-ee
gitlab	eq	12.4.4-ee
gitlab	eq	12.5.2-ee
gitlab	eq	12.4.5-ee
gitlab	eq	12.5.1-ee
gitlab	eq	12.4.2-ee
gitlab	eq	12.5.0-ee
gitlab	eq	12.4.1-ee