CVE-2019-7176

An issue was discovered in GitLab Community and Enterprise Edition 8.x (starting in 8.9), 9.x, 10.x, and 11.x before 11.5.9, 11.6.x before 11.6.7, and 11.7.x…

published September 9, 2019

CVSS
—
EPSS
1%
Percentile
60.0
In the wild
Unconfirmed
What it is

An issue was discovered in GitLab Community and Enterprise Edition 8.x (starting in 8.9), 9.x, 10.x, and 11.x before 11.5.9, 11.6.x before 11.6.7, and 11.7.x before 11.7.2. It has Incorrect Access Control. Guest users are able to add reaction emojis on comments to which they have no visibility.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00923 · 60.0th percentile
Published
2019-09-09T20:02Z
EPSS history
Timeline
  • 09 SEP 20:02Z
    An issue was discovered in GitLab Community and Enterprise Edition 8.x (starting in 8.9), 9.x, 10.x, and 11.x before 11.5.9, 11.6.x before 11.6.7, and 11.7.x…
    cvelistv5