CVE-2018-19359

2019-04-2521:29:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.1%

GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control.

CPENameOperatorVersion
gitlabeq11.4.2-ee
gitlabeq11.4.3-ee
gitlabeq11.4.4-ee
gitlabeq11.4.0-ee
gitlabeq11.4.5-ee
gitlabeq11.4.1-ee

Name	Operator	Version
gitlab	eq	11.4.2-ee
gitlab	eq	11.4.3-ee
gitlab	eq	11.4.4-ee
gitlab	eq	11.4.0-ee
gitlab	eq	11.4.5-ee
gitlab	eq	11.4.1-ee

References

about.gitlab.com/2018/11/19/critical-security-release-gitlab-11-dot-4-dot-6-released/

about.gitlab.com/blog/categories/releases/

gitlab.com/gitlab-org/gitlab-ce/issues/54189