What the vulnerability does

01Description

An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to view private system notes from a GraphQL endpoint.

Key dates

02Disclosure timeline

December 18, 2019 CVE published
August 5, 2024 Record updated