rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-15499 
CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with a data: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T03:19:57.000Z
CVE-2019-15501 
Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T13:47:59.000Z
CVE-2019-15502 
The TeamSpeak client before 3.3.2 allows remote servers to trigger a crash via the 0xe2 0x81 0xa8 0xe2 0x81 0xa7 byte sequence, aka Unicode characters U+2068 (FIRST STRONG ISOLATE) and U+2067 (RIGHT-TO-LEFT ISOLATE).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T15:31:27.000Z
CVE-2019-15503 
cgi-cpn/xcoding/prontus_videocut.cgi in AltaVoz Prontus (aka ProntusCMS) through 12.0.3.0 has "Improper Neutralization of Special Elements used in an OS Command," allowing attackers to execute OS commands via an HTTP GET parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:21:43.000Z
CVE-2019-15504 
drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via usbip or usbredir).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T05:18:30.000Z
CVE-2019-15505 
drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T05:18:51.000Z
CVE-2019-15506 
An issue was discovered in Kaseya Virtual System Administrator (VSA) through 9.4.0.37. It has a critical information disclosure vulnerability. An unauthenticated attacker can send properly formatted requests to the web application and download sensitive files and information. For example, the /DATAREPORTS directory can be farmed for reports. Because this directory contains the results of reports such as NMAP, Patch Status, and Active Directory domain metadata, an attacker can easily collect this critical information and parse it for information. There are a number of directories affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T11:32:21.000Z
CVE-2019-15507 
In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an authenticated user (in certain limited special-characters circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 2019.7.7. The fix was back-ported to LTS 2019.6.7 as well as LTS 2019.3.8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T05:49:50.000Z
CVE-2019-15508 
In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an authenticated user (in certain limited OctopusPrintVariables circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext. This is fixed in 5.0.1. The fix was back-ported to 4.0.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T05:49:35.000Z
CVE-2019-15510 
ManageEngine_DesktopCentral.exe in Zoho ManageEngine Desktop Central 10 allows HTML injection on the user administration page via the description of a role.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-23T13:03:12.000Z
CVE-2019-15511 
An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an attacker can send unauthenticated local TCP packets to the service to gain SYSTEM privileges in Windows system where GOG Galaxy software is installed. All GOG Galaxy versions before 1.2.60 and all corresponding versions of GOG Galaxy 2.0 Beta are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T17:47:40.000Z
CVE-2019-15513 
An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network locking is mishandled after reception of a long SetWanSettings command, leading to a device hang.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T06:48:57.000Z
CVE-2019-15514 
The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned phone numbers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T12:07:53.000Z
CVE-2019-15515 
Discourse 2.3.2 sends the CSRF token in the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:20:21.000Z
CVE-2019-15516 
Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T14:42:05.000Z
CVE-2019-15517 
jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T14:53:42.000Z
CVE-2019-15518 
Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T14:51:59.000Z
CVE-2019-15519 
Power-Response before 2019-02-02 allows directory traversal (up to the application's main directory) via a plugin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T14:46:49.000Z
CVE-2019-15520 
comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T14:58:08.000Z
CVE-2019-15521 
Spoon Library through 2014-02-06, as used in Fork CMS before 1.4.1 and other products, allows PHP object injection via a cookie containing an object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T12:11:26.000Z
CVE-2019-15522 
An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T20:24:41.000Z
CVE-2019-15523 
An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-30T20:04:16.000Z
CVE-2019-15524 
CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a photo/upload/2019/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T12:52:49.000Z
CVE-2019-15525 
There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T15:20:23.000Z
CVE-2019-15526 
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Type field to SetWanSettings, a related issue to CVE-2019-13482.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T16:04:04.000Z
CVE-2019-15527 
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the MaxIdTime field to SetWanSettings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T16:03:53.000Z
CVE-2019-15528 
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Interface field to SetStaticRouteSettings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T16:03:40.000Z
CVE-2019-15529 
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Username field to Login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T16:03:29.000Z
CVE-2019-15530 
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the LoginPassword field to Login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T16:03:16.000Z
CVE-2019-15531 
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T16:03:07.000Z
CVE-2019-15532 
CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T11:45:10.000Z
CVE-2019-15533 
XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:19:57.000Z
CVE-2019-15534 
Raml-Module-Builder 26.4.0 allows SQL Injection in PostgresClient.update.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T11:47:25.000Z
CVE-2019-15535 
Tasking Manager before 3.4.0 allows SQL Injection via custom SQL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T17:47:57.000Z
CVE-2019-15536 
The Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via delete_records.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T17:51:20.000Z
CVE-2019-15537 
The proxystatistics module before 3.1.0 for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-23T17:49:40.000Z
CVE-2019-15538 
An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-25T15:25:26.000Z
CVE-2019-15539 
The proj_doc_edit_page.php Project Documentation feature in MantisBT before 2.21.3 has a stored cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code (if CSP settings permit it) after uploading an attachment with a crafted filename. The code is executed when editing the document's page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-19T18:20:08.000Z
CVE-2019-15540 
filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that can lead to root access by a local Linux user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-25T16:43:54.000Z
CVE-2019-15541 
rustls-mio/examples/tlsserver.rs in the rustls crate before 0.16.0 for Rust allows attackers to cause a denial of service (loop of conn_event and ready) by arranging for a client to never be writable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T11:49:39.000Z
CVE-2019-15542 
An issue was discovered in the ammonia crate before 2.1.0 for Rust. There is uncontrolled recursion during HTML DOM tree serialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:10:15.000Z
CVE-2019-15543 
An issue was discovered in the slice-deque crate before 0.2.0 for Rust. There is memory corruption in certain allocation cases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:09:28.000Z
CVE-2019-15544 
An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:08:30.000Z
CVE-2019-15545 
An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. Attackers can spoof ed25519 signatures.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:07:58.000Z
CVE-2019-15546 
An issue was discovered in the pancurses crate through 0.16.1 for Rust. printw and mvprintw have format string vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:06:56.000Z
CVE-2019-15547 
An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are format string issues in printw functions because C format arguments are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:05:33.000Z
CVE-2019-15548 
An issue was discovered in the ncurses crate through 5.99.0 for Rust. There are instr and mvwinstr buffer overflows because interaction with C functions is mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T17:02:16.000Z
CVE-2019-15549 
An issue was discovered in the asn1_der crate before 0.6.2 for Rust. Attackers can trigger memory exhaustion by supplying a large value in a length field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T16:55:10.000Z
CVE-2019-15550 
An issue was discovered in the simd-json crate before 0.1.15 for Rust. There is an out-of-bounds read and an incorrect crossing of a page boundary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:31:38.000Z
CVE-2019-15551 
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:39:09.000Z
CVE-2019-15552 
An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading to arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:41:50.000Z
CVE-2019-15553 
An issue was discovered in the memoffset crate before 0.5.0 for Rust. offset_of and span_of can cause exposure of uninitialized memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:33:08.000Z
CVE-2019-15554 
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:35:22.000Z
CVE-2019-15555 
FredReinink Wellness-app before 2019-06-19 allows SQL injection, related to dietTrack.php, exerciseGenerator.php, fitnessTrack.php, and server.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T16:49:40.000Z
CVE-2019-15556 
Pvanloon1983 social_network before 2019-07-03 allows SQL injection in includes/form_handlers/register_handler.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T12:23:27.000Z
CVE-2019-15557 
XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T16:48:16.000Z
CVE-2019-15558 
XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T16:47:09.000Z
CVE-2019-15559 
DianoxDragon Hawn before 2019-07-10 allows SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T15:55:33.000Z
CVE-2019-15560 
The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T15:52:15.000Z
CVE-2019-15561 
FlashLingo before 2019-06-12 allows SQL injection, related to flashlingo.js and db.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T12:30:18.000Z
CVE-2019-15562 
GORM before 1.9.10 allows SQL injection via incomplete parentheses. NOTE: Misusing Gorm by passing untrusted user input where Gorm expects trusted SQL fragments is a vulnerability in the application, not in Gorm
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T12:26:07.000Z
CVE-2019-15563 
Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:46:57.000Z
CVE-2019-15564 
The Compassion Switzerland addons 10.01.4 for Odoo allow SQL injection in models/partner_compassion.py.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:43:39.000Z
CVE-2019-15565 
The ICOMMKT connector before 1.0.7 for PrestaShop allows SQL injection in icommktconnector.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:42:51.000Z
CVE-2019-15566 
The Alfresco application before 1.8.7 for Android allows SQL injection in HistorySearchProvider.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:36:14.000Z
CVE-2019-15567 
OpenForis Arena before 2019-05-07 allows SQL injection in the sorting feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:34:25.000Z
CVE-2019-15568 
idseq-web before 2019-07-01 in Infectious Disease Sequencing Platform IDseq allows SQL injection via tax_levels.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:32:31.000Z
CVE-2019-15569 
HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:30:06.000Z
CVE-2019-15570 
BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:29:04.000Z
CVE-2019-15571 
The WEB control panel before 2019-04-30 for ClonOS allows SQL injection in clonos.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:28:17.000Z
CVE-2019-15572 
Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:24:50.000Z
CVE-2019-15573 
Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:24:15.000Z
CVE-2019-15574 
Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T14:23:16.000Z
CVE-2019-15575 
A command injection exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to inject commands via the API through the blobs scope.
Problem types: cwe_id: CWE-77
description: Command Injection - Generic (CWE-77)
Affected products: vendor: n/a
product: GitLab CE/EE
Published: 2019-12-18T21:00:16.000Z
CVE-2019-15576 
An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed an attacker to view private system notes from a GraphQL endpoint.
Problem types: cwe_id: CWE-200
description: Information Disclosure (CWE-200)
Affected products: vendor: n/a
product: GitLab CE/EE
Published: 2019-12-18T21:00:08.000Z
CVE-2019-15577 
An information disclosure vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.12 that allowed project milestones to be disclosed via groups browsing.
Problem types: cwe_id: CWE-200
description: Information Disclosure (CWE-200)
Affected products: vendor: n/a
product: GitLab CE/EE
Published: 2019-12-18T21:00:00.000Z
CVE-2019-15578 
An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). The path of a private project, that used to be public, would be disclosed in the unsubscribe email link of issues and merge requests.
Problem types: cwe_id: CWE-200
description: Information Disclosure (CWE-200)
Affected products: vendor: GitLab
product: GitLab CE/EE
Published: 2020-01-28T02:46:55.000Z
CVE-2019-15579 
An information disclosure exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) where the assignee(s) of a confidential issue in a private project would be disclosed to a guest via milestones.
Problem types: cwe_id: CWE-200
description: Information Disclosure (CWE-200)
Affected products: vendor: GitLab
product: GitLab CE/EE
Published: 2020-01-28T02:45:42.000Z
CVE-2019-15580 
An information exposure vulnerability exists in gitlab.com <v12.3.2, <v12.2.6, and <v12.1.10 when using the blocking merge request feature, it was possible for an unauthenticated user to see the head pipeline data of a public project even though pipeline visibility was restricted.
Problem types: cwe_id: CWE-201
description: Information Exposure Through Sent Data (CWE-201)
Affected products: vendor: n/a
product: gitlab.com
Published: 2019-12-18T20:59:15.000Z
CVE-2019-15581 
An IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a project owner or maintainer to see the members of any private group via merge request approval rules.
Problem types: cwe_id: CWE-639
description: Insecure Direct Object Reference (IDOR) (CWE-639)
Affected products: vendor: GitLab
product: GitLab EE
Published: 2020-01-28T02:43:00.000Z
CVE-2019-15582 
An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) that allowed a maintainer to add any private group to a protected environment.
Problem types: cwe_id: CWE-639
description: Insecure Direct Object Reference (IDOR) (CWE-639)
Affected products: vendor: GitLab
product: GitLab EE
Published: 2020-01-28T02:36:05.000Z