CVE-2019-5473

EPSS 1.7%CWE-288

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

09 Sep 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitLab 12.1.2 and 12.0.4.

Affected products

Want to know if your infrastructure is exposed to this?

References