CVE-2019-5463: GitLab

Medium severity, CVSS 5.3. EPSS: 1.9% chance of exploitation in the next 30 days.

An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6.

Affected products

• GitLab GitLab: from 11.11.0, before 11.11.7 (fixed in 11.11.7); from 12.0.0, before 12.0.4 (fixed in 12.0.4); from 12.1.0, before 12.1.2 (fixed in 12.1.2)

Published 2019-09-09. Last modified 2026-06-17.