CVE-2019-15575 - AskarLabs CVE Database

CVE-2019-15575

Vendor N/A

Product GitLab CE/EE

Weakness CWE-77

Published December 18, 2019

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A command injection exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to inject commands via the API through the blobs scope.

Key dates

02Disclosure timeline

December 18, 2019 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-15575 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/77.html

Related vulnerabilities

04Related CVE

CVE-2021-1551 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities CVE-2026-40061 iControl REST and tmsh vulnerability CVE-2024-37091 WordPress Consulting Elementor Widgets plugin <= 1.3.0 - Remote Code Execution (RCE) vulnerability CVE-2025-29887 QuRouter 2.5 CVE-2026-1149 Totolink LR350 POST Request cstecgi.cgi setDiagnosisCfg command injection