GCVE - cpe:2.3:a:n/a:gitlab:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:gitlab:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	N/A (`22f567d3-1203-528c-8f0e-3eb9c2f6ca78`)
Product	Gitlab (`a3718bae-0fd1-57d4-b36e-df8204856e22`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-5471`	vulnerable	2026-06-08 05:13:59.239455	Details available An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This was addressed in GitLab 12.1.2, 12.0.4, and 11.11.6. Published: 2019-09-09T17:47:02.000Z Updated: 2024-08-04T19:54:53.486Z Open on db.gcve.eu Reference links https://hackerone.com/reports/496973 https://gitlab.com/gitlab-org/gitlab-ee/issues/11515	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5469`	vulnerable	2026-06-08 05:13:59.237130	Details available An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets. Published: 2019-12-18T20:59:50.000Z Updated: 2024-08-04T19:54:53.479Z Open on db.gcve.eu Reference links https://hackerone.com/reports/534794 https://gitlab.com/gitlab-org/gitlab-ce/issues/60551	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15594`	vulnerable	2026-06-08 05:12:57.643266	Details available GitLab 11.8 and later contains a security vulnerability that allows a user to obtain details of restricted pipelines via the merge request endpoint. Published: 2020-02-14T21:29:53.000Z Updated: 2024-08-05T00:49:13.721Z Open on db.gcve.eu Reference links https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/ https://hackerone.com/reports/507064	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15593`	vulnerable	2026-06-08 05:12:57.640963	Details available GitLab 12.2.3 contains a security vulnerability that allows a user to affect the availability of the service through a Denial of Service attack in Issue Comments. Published: 2019-11-22T21:57:26.000Z Updated: 2024-08-05T00:49:13.649Z Open on db.gcve.eu Reference links https://hackerone.com/reports/557154	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15592`	vulnerable	2026-06-08 05:12:57.640616	Details available GitLab 12.2.2 and below contains a security vulnerability that allows a guest user in a private project to see the merge request ID associated to an issue via the activity timeline. Published: 2020-02-14T21:27:56.000Z Updated: 2024-08-05T00:49:13.674Z Open on db.gcve.eu Reference links https://hackerone.com/reports/588876 https://about.gitlab.com/releases/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-15591`	vulnerable	2026-06-08 05:12:57.640141	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.