CVE-2019-6791

CVE-2019-6791 affects GitLab Community/Enterprise Edition prior to 11.5.8, 11.6.x prior to 11.6.6, and 11.7.x prior to 11.7.1. The issue is Incorrect Access Control: when importing a project with visibility more permissive than the target group, the project retains its prior visibility, potential...

CVE-2019-6791

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control issue 3 of 3. When a project with visibility more permissive than the target group is imported, it will retain its prior visibility...