CVE-2018-19496

An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1

published July 10, 2019

CVSS
—
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access control vulnerability that permits a user with insufficient privileges to promote a project milestone to a group milestone.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00826 · 57.0th percentile
Published
2019-07-10T14:50Z
EPSS history
Timeline
  • 10 JUL 14:50Z
    An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1
    cvelistv5