vulnerability
Gitlab Gitlab: CVE-2019-5487: Improper Access Control
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Dec 18, 2019 | Apr 22, 2025 | Mar 25, 2026 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Dec 18, 2019
Added
Apr 22, 2025
Modified
Mar 25, 2026
Description
An improper access control vulnerability exists in Gitlab EE less thanv12.3.3, less thanv12.2.7, and less thanv12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits.
Solution
gitlab-gitlab-upgrade-latest
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.