CVE-2018-19359

HIGH

GitLab <11.5.0-rc12, 11.4.6, 11.3.10 - Info Disclosure

Title source: llm
STIX 2.1

Description

GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control.

References (3)

Core 3

Scores

CVSS v3 8.8
EPSS 0.0028
EPSS Percentile 51.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (2)
gitlab/gitlab 11.5.0 (24 CPE variants)
gitlab/gitlab 11.3.0 - 11.3.10 (2 CPE variants)
Published Apr 25, 2019
Tracked Since Feb 18, 2026