PT-2019-15409
CVE-2019-18452
·
Published
2019-11-26
·
Updated
2019-11-27
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GitLab Community and Enterprise Edition versions 11.3 through 12.4
Description
An issue was discovered when moving an issue to a public project from a private one, resulting in Insecure Permissions.
Recommendations
For GitLab Community and Enterprise Edition versions 11.3 through 12.4, consider restricting access to issue movement functionality between private and public projects until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾