CVE-2019-12446: 
GitLab vulnerability analysis and mitigation

A vulnerability was discovered in GitLab Community and Enterprise Edition versions 8.3 through 11.11 that allows information exposure through an error message. Specifically, when a failure occurred during repository import by URL, the error page would expose the plaintext password of the repository being imported (GitLab Release).

The vulnerability stems from improper error handling during repository import operations, where authentication credentials were inadvertently displayed in error messages. This security issue affects both Community Edition (CE) and Enterprise Edition (EE) of GitLab, spanning versions from 8.3 through 11.11 (NVD).

The vulnerability could lead to the exposure of sensitive repository credentials through error messages. When a repository import operation fails, the plaintext password used for authentication would be displayed on the error page, potentially compromising repository security (GitLab Release).

GitLab has addressed this vulnerability in versions 11.11.1, 11.10.5, and 11.9.12. Users are strongly recommended to upgrade their GitLab installations to one of these patched versions immediately to mitigate the risk (GitLab Release).