CVE-2018-19576

GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest…

published July 10, 2019

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest user to make changes to or delete their own comments on an issue, after the issue was made Confidential.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01184 · 67.6th percentile
Published
2019-07-10T15:35Z
EPSS history
Timeline
  • 10 JUL 15:35Z
    GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest…
    cvelistv5