CVEs-PoC/2019/CVE-2019-15729.md

CVE-2019-15729

Description

An issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An internal endpoint unintentionally disclosed information about the last pipeline that ran for a merge request.

POC

Reference

• https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released/

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/cyb3r-w0lf/nuclei-template-collection