CVE-2019-5487

MEDIUM · CVSS 5.3 EPSS 1.39%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-12-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-5487

Severity

MEDIUM

CVSS

5.3

EPSS

1.39%

GitLab

Original NVD Description

An improper access control vulnerability exists in Gitlab EE <v12.3.3, <v12.2.7, & <v12.1.13 that allowed the group search feature with Elasticsearch to return private code, merge requests and commits.