CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects GitLab.
CVE
CVE-2019-19629
Severity
HIGH
CVSS
7.5
EPSS
1.16%
GitLab
Original NVD Description
In GitLab EE 10.5 through 12.5.3, 12.4.5, and 12.3.8, when transferring a public project to a private group, private code would be disclosed via the Group Search API provided by the Elasticsearch integration.
Related CVEs
Other vulnerabilities affecting the same vendor(s)