CVE-2019-7155

GitLab CVE-2019-7155 affects Community and Enterprise Edition 9.x, 10.x, and 11.x (before 11.5.8, 11.6.x before 11.6.6, 11.7.x before 11.7.1). Root cause is Incorrect Access Control: a user can retain their project role in a private group after being removed from the group if their project privil...

CVE-2019-7155

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. A user retains their role within a project in a private group after being removed from the group, if their...