CVE-2019-5469 | BDVDB-2026-127679 Detail

GitLab

Description#

An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-639 Authorization Bypass Through User-Controlled Key

References#

https://hackerone.com/reports/534794
https://gitlab.com/gitlab-org/gitlab-ce/issues/60551

Exploit#

No public exploit known

History#

Version 12019-12-18Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.