Lucene search

K
osvGoogleOSV:CVE-2018-19576
HistoryJul 10, 2019 - 4:15 p.m.

CVE-2018-19576

2019-07-1016:15:11
Google
osv.dev
6

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%

GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest user to make changes to or delete their own comments on an issue, after the issue was made Confidential.

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%