CVE-2019-19314: GitLab

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext.

Affected products

• GitLab GitLab: from 8.4.0, before 12.3.8 (fixed in 12.3.8); from 12.4.0, before 12.4.5 (fixed in 12.4.5); from 12.5.0, before 12.5.2 (fixed in 12.5.2)

Published 2020-01-05. Last modified 2026-06-17.