Commit 616bdd4e authored by Salvatore Bonaccorso's avatar Salvatore Bonaccorso
Browse files

Add tracking for gitaly for CVE-2019-19260

parent 68d553f1

data/CVE/list

+2 −0
Original line number Diff line number Diff line
@@ -466,6 +466,8 @@ CVE-2019-19260 [Former project members able to access repository information] 
	RESERVED

	- gitlab <unfixed>

	- gitlab-workhorse 8.8.1+debian-3

	[experimental] - gitaly 1.65.2+dfsg-1

	- gitaly <unfixed>

	NOTE: https://about.gitlab.com/blog/2019/11/27/security-release-gitlab-12-5-1-released/

CVE-2019-19259 [IDOR when adding users to protected environments]

	RESERVED