NetSight
high7.5

CVE-2018-19581

GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerability that…

Impact

GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerability that allows a Guest user to set the weight of an issue they create.

Affected products

VendorProductAffected versions
GitlabGitlab
from 8.3.0 before 11.3.11
from 11.4.0 before 11.4.8
from 11.5.0 before 11.5.1

Weakness classification

References