CVE-2019-15591

CVE-2019-15591 is an improper access control vulnerability affecting GitLab versions prior to 12.3.3. This flaw allows an authenticated attacker to access sensitive container and dependency scanning reports via the merge request widget, even when public pipelines are explicitly disabled. Rated as Medium severity with a CVSS score of 6.5, the vulnerability has a low attack complexity and high confidentiality impact, requiring only low privileges to exploit. There is no evidence of active exploitation, and public exploit intelligence such as Metasploit or Nuclei modules are unavailable, though it has received some community and media attention.