CVE-2019-5469: GitLab

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets.

Affected products

• GitLab GitLab: from 11.11.0, before 11.11.6 (fixed in 11.11.6); from 12.0.0, before 12.0.4 (fixed in 12.0.4); from 12.1.0, before 12.1.2 (fixed in 12.1.2)

Published 2019-12-18. Last modified 2026-06-17.