CVE-2019-5466

CVE-2019-5466

Vendor N/A
Product GitLab CE/EE
Weakness CWE-639 · IDOR
Published January 28, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to disclose label names.

Key dates

02Disclosure timeline

January 28, 2020 CVE published
August 4, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2020-36895 EIBIZ i-Media Server Digital Signage 3.8.0 Unauthenticated Configuration Disclosure CVE-2026-25147 OpenEMR's Portal Payment Endpoint Trusts User-Controlled pid CVE-2026-7681 jsbroks COCO Annotator Dataset API datasets.py authorization CVE-2026-33141 Chamilo LMS has an IDOR in REST API Stats Endpoint Exposes Any User's Learning Data CVE-2026-1704 Appointment Booking Calendar <= 1.6.9.29 - Insecure Direct Object Reference to Authenticated (Staff+) Sensitive Information Exposure