CVE-2019-5883

CRITICAL

GitLab Community and Enterprise Edition <11.3.11 <11.4.8 <11.5.1 - Incorrect Access Control in Issue Comments

Title source: llm

Description

An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 6.0 and later but before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. The issue comments feature could allow a user to comment on an issue which they shouldn't be allowed to.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/

Scores

CVSS v3 9.1

EPSS 0.0014

EPSS Percentile 33.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Details

Status published

Products (1)

gitlab/gitlab 6.0.0 - 11.3.11 (2 CPE variants)

Published May 17, 2019

Tracked Since Feb 18, 2026