CVE-2018-19576

Published: Jul 10, 2019Modified: Nov 21, 2024

8.1

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest user to make changes to or delete their own comments on an issue, after the issue was made Confidential.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	From 11.4.0 to 11.4.8
Gitlab Gitlab	From 11.5.0 to 11.5.1
Gitlab Gitlab	From 8.6.0 to 11.3.11
Gitlab Gitlab	From 11.4.0 to 11.4.8
Gitlab Gitlab	From 11.5.0 to 11.5.1
Gitlab Gitlab	From 8.6.0 to 11.3.11