ByteOS Network

NVD Vulnerability Details :

CVE-2019-14944

Modified

Source-cve@mitre.org

Published At-16 Apr, 2023 | 00:15

Updated At-06 Feb, 2025 | 17:15

An issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0.6, and 12.1 before 12.1.6. Gitaly allows injection of command-line flags. This sometimes leads to privilege escalation or remote code execution.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Secondary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CPE Matches

GitLab Inc.

>>gitlab>>Versions before 11.11.8(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

GitLab Inc.

>>gitlab>>Versions before 11.11.8(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

GitLab Inc.

>>gitlab>>Versions from 12.0.0(inclusive) to 12.0.6(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

GitLab Inc.

>>gitlab>>Versions from 12.0.0(inclusive) to 12.0.6(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

GitLab Inc.

>>gitlab>>Versions from 12.1.0(inclusive) to 12.1.6(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*

GitLab Inc.

>>gitlab>>Versions from 12.1.0(inclusive) to 12.1.6(exclusive)

cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-77	Primary	nvd@nist.gov
CWE-77	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://about.gitlab.com/blog/categories/releases/	cve@mitre.org	Release Notes
https://about.gitlab.com/releases/2019/08/12/critical-security-release-gitlab-12-dot-1-dot-6-released/	cve@mitre.org	Vendor Advisory
https://gitlab.com/gitlab-org/gitaly/issues/1801	cve@mitre.org	Exploit Issue Tracking Vendor Advisory
https://gitlab.com/gitlab-org/gitaly/issues/1802	cve@mitre.org	Broken Link
https://about.gitlab.com/blog/categories/releases/	af854a3a-2127-422b-91ae-364da2661108	Release Notes
https://about.gitlab.com/releases/2019/08/12/critical-security-release-gitlab-12-dot-1-dot-6-released/	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://gitlab.com/gitlab-org/gitaly/issues/1801	af854a3a-2127-422b-91ae-364da2661108	Exploit Issue Tracking Vendor Advisory
https://gitlab.com/gitlab-org/gitaly/issues/1802	af854a3a-2127-422b-91ae-364da2661108	Broken Link

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History