vulnerability
Gitlab Gitlab: CVE-2019-5487: Improper Access Control
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Dec 18, 2019 | Apr 22, 2025 | Jul 2, 2025 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Dec 18, 2019
Added
Apr 22, 2025
Modified
Jul 2, 2025
Description
An improper access control vulnerability exists in Gitlab EE less thanv12.3.3, less thanv12.2.7, and less thanv12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits.
Solution
gitlab-gitlab-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.