CVE-2019-15581

An IDOR exists in 12.3.2, 12.2.6, and 12.1.12 for GitLab Community Edition CE and Enterprise Edition EE that allowed a project owner or maintainer to see the members of any private group via merge request approval rules...

CVE-2019-15581

GitLab CVE-2019-15581 describes an IDOR in GitLab CE/EE prior to certain patch levels (versions <12.3.2, <12.2.6,