CVE-2019-6995

CVE-2019-6995 affects GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x. The issue is an Incorrect Access Control that allows users to comment on locked project issues. Affected versions include 11.x prior to 11.5.8, 11.6.x prior to 11.6.6, and 11.7.x prior to 11.7.1. The vulnerabi...