NetSight
IP …
medium5.3

CVE-2018-19577

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability t…

Impact

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue.

Affected products

VendorProductAffected versions
GitlabGitlab
from 8.6.0 before 11.3.11
from 11.4.0 before 11.4.8
from 11.5.0 before 11.5.1

Weakness classification

CWE-284

References