CVE-2019-18446

CVE-2019-18446 affects GitLab Community and Enterprise Edition 8.15–12.4, describing an Insecure Permissions issue (issue 1 of 2). The connected Red Hat, SUSE, Debian, and OSV sources corroborate the same vulnerability description. No exploit details are provided in the documents. Impact details ...

CVE-2019-18446

Removed by vendor...

CVE-2019-18447

GitLab Community and Enterprise Edition prior to 12.4 is affected by CVE-2019-18447 due to Insecure Permissions. The issue was publicly disclosed with CVSSv2/3.1 base scores of 4.0/4.3 (network, low attack complexity; partial confidentiality impact; no integrity/availability impact). Exploitation...

CVE-2019-18447

Removed by vendor...

CVE-2019-18449

CVE-2019-18449 affects GitLab Community and Enterprise Edition prior to 12.4, where the autocomplete feature exposes Insecure Permissions (issue 2 of 2). The available connected sources corroborate that the issue is tied to the autocomplete function and insecure permissions. Public notices refere...

CVE-2019-18449

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the autocomplete feature. It has Insecure Permissions issue 2 of 2...

CVE-2019-18449

Removed by vendor...

CVE-2019-18450

The CVE-2019-18450 entry concerns GitLab Community and Enterprise Edition before 12.4, where the Project labels feature allowed insecure permissions. The vulnerability affects GitLab CE/EE components related to label handling, enabling permission issues as described in the CVE description. In-ses...

CVE-2019-18450

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions...

CVE-2019-18450

Removed by vendor...

CVE-2019-18452

An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public project from a private one. It has Insecure Permissions...

CVE-2019-18453

An issue was discovered in GitLab Community and Enterprise Edition 11.6 through 12.4 in the add comments via email feature. It has Insecure Permissions...

CVE-2019-18453

CVE-2019-18453 affects GitLab Community and Enterprise Edition versions 11.6–12.4, in the add comments via email feature. The issue is caused by insecure permissions/improper access control on comments, allowing an attacker to comment when authenticated. Several sources (Red Hat, osv.dev, Debian ...

CVE-2019-18453

Removed by vendor...

CVE-2019-18459

An issue was discovered in GitLab Community and Enterprise Edition 11.3 to 12.3 in the protected environments feature. It has Insecure Permissions issue 3 of 4...

CVE-2019-18457

An issue was discovered in GitLab Community and Enterprise Edition 11.8 through 12.4 when handling Security tokens.. It has Insecure Permissions...

CVE-2019-18457

An issue was discovered in GitLab Community and Enterprise Edition 11.8 through 12.4 when handling Security tokens.. It has Insecure Permissions...

CVE-2019-18459

An issue was discovered in GitLab Community and Enterprise Edition 11.3 to 12.3 in the protected environments feature. It has Insecure Permissions issue 3 of 4...

Design/Logic Flaw

An issue was discovered in GitLab Community and Enterprise Edition 11.8 through 12.4 when handling Security tokens.. It has Insecure Permissions...

Design/Logic Flaw

An issue was discovered in GitLab Community and Enterprise Edition 11.3 to 12.3 in the protected environments feature. It has Insecure Permissions issue 3 of 4...