Vulnerabilities > CVE-2019-15577 - Improper Restriction of Excessive Authentication Attempts vulnerability in Gitlab

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
gitlab
CWE-307

Summary

An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed project milestones to be disclosed via groups browsing.

Vulnerable Configurations

Part Description Count
Application
Gitlab
1623