CVE-2018-19582

GitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affected by an insecure direct object reference vulnerability that permits an unauthorized…

published July 10, 2019

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

GitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affected by an insecure direct object reference vulnerability that permits an unauthorized user to publish the draft merge request comments of another user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00839 · 57.4th percentile
Published
2019-07-10T16:45Z
EPSS history
Timeline
  • 10 JUL 16:45Z
    GitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affected by an insecure direct object reference vulnerability that permits an unauthorized…
    cvelistv5