CVE-2018-19584

GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that…

published July 10, 2019

CVSS
—
EPSS
2%
Percentile
74.8
In the wild
Unconfirmed
What it is

GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that allows authenticated, but unauthorized, users to view members and milestone details of private groups.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01545 · 74.8th percentile
Published
2019-07-10T16:50Z
EPSS history
Timeline
  • 10 JUL 16:50Z
    GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that…
    cvelistv5