VULNERABILITY INTELLIGENCE

CVE-2018-19577

CVSS score5.3 MEDIUM

EPSS probability2.15%

CISA KEVNot currently listed

Published2019-07-10

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue.

Weakness classification

CWE-284: Improper Access Control

Primary references

cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org — Broken Link, Release Notes, Vendor Advisory
cve@mitre.org — Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Vendor Advisory