Security Advisory

CVE-2019-6788

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-09-09 19:30:25

Last updated 2024-08-04 20:31:04

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure (issue 3 of 6). For installations using GitHub or Bitbucket OAuth integrations, it is possible to use a covert redirect to obtain the user OAuth token for those services.

← Browse all CVEs View on cve.org ↗