NetSight
medium6.5

CVE-2019-5469

An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potenti…

Impact

An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets.

Affected products

VendorProductAffected versions
GitlabGitlab
from 11.11.0 before 11.11.6
from 12.0.0 before 12.0.4
from 12.1.0 before 12.1.2

Weakness classification

References