CVE-2019-6787

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2019-6787
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-6787.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-6787
Published
2019-05-17T16:29:05.860Z
Modified
2025-11-14T10:28:36.739586Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitLab API allowed project Maintainers and Owners to view the trigger tokens of other project users.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
346e677ef9db2a27c3ee69d420563ecc564e5afe
Fixed
abfb287f424b28a64807bf9ba12c4a909e8d9f86

Affected versions

v10.*

v10.1.0.pre
v10.2.0.pre
v10.3.0.pre
v10.4.0.pre
v10.5.0.pre
v10.6.0.pre
v10.7.0.pre
v10.8.0.pre
v10.9.0.pre

v11.*

v11.0.0.pre
v11.1.0.pre
v11.2.0.pre
v11.3.0.pre
v11.5.0-ee
v11.5.0-rc1-ee
v11.5.0-rc10-ee
v11.5.0-rc11-ee
v11.5.0-rc12-ee
v11.5.0-rc13-ee
v11.5.0-rc2-ee
v11.5.0-rc3-ee
v11.5.0-rc4-ee
v11.5.0-rc5-ee
v11.5.0-rc6-ee
v11.5.0-rc7-ee
v11.5.0-rc8-ee
v11.5.0-rc9-ee
v11.5.1-ee
v11.5.2-ee
v11.5.3-ee
v11.5.4-ee
v11.5.5-ee
v11.5.6-ee
v11.5.7-ee

v6.*

v6.0.0-ee
v6.0.0-ee.beta
v6.0.0-ee.rc1
v6.1.0-ee
v6.2.1
v6.2.2
v6.3.0-ee
v6.3.1-ee
v6.4.0-ee
v6.4.1
v6.4.2
v6.4.3
v6.5.0-ee
v6.5.1
v6.6.0-ee
v6.6.1
v6.6.2
v6.7.0-ee
v6.7.0.rc1-ee
v6.7.1
v6.7.2
v6.8.0-ee
v6.8.1

v7.*

v7.0.0-ee
v7.1.0-ee
v7.1.0.rc1-ee
v7.2.0.rc1-ee
v7.2.0.rc2-ee
v7.2.0.rc3-ee
v7.2.0.rc4-ee
v7.2.0.rc5-ee
v7.3.0-ee
v7.3.0.rc1-ee
v7.4.0-ee
v7.4.1-ee
v7.4.2-ee
v7.4.3-ee
v7.4.4-ee

v8.*

v8.11.0
v8.11.0-ee
v8.11.0-rc1-ee
v8.11.0-rc2-ee
v8.11.0-rc3-ee
v8.11.0-rc4-ee
v8.11.0-rc5-ee
v8.11.0-rc6-ee
v8.11.0-rc7-ee
v8.11.1
v8.12.0
v8.12.0-ee
v8.12.0-rc1
v8.12.0-rc1-ee
v8.12.0-rc2
v8.12.0-rc2-ee
v8.12.0-rc3
v8.12.0-rc3-ee
v8.12.0-rc4
v8.12.0-rc4-ee
v8.12.0-rc5
v8.12.0-rc5-ee
v8.12.0-rc6
v8.12.0-rc6-ee
v8.12.0-rc7
v8.12.0-rc7-ee
v8.12.0.pre
v8.12.1
v8.12.1-ee
v8.12.2
v8.12.2-ee
v8.12.3-ee
v8.13.0.pre
v8.14.0.pre
v8.15.0.pre
v8.16.0.pre
v8.17.0.pre
v8.18.0.pre
v8.2.0-ee
v8.2.0.rc1
v8.2.0.rc1-ee
v8.2.0.rc2
v8.2.0.rc2-ee
v8.8.0
v8.8.0-ee
v8.8.0-rc1
v8.8.0-rc1-ee
v8.8.0-rc2
v8.8.0-rc2-ee
v8.8.1-ee

v9.*

v9.1.0.pre
v9.2.0.pre
v9.3.0.pre
v9.5.0.pre
v9.6.0.pre