PT-2019-15418
CVE-2019-18461
·
Published
2019-11-26
·
Updated
2019-12-03
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
GitLab Community and Enterprise Edition versions 11.3 through 12.3
Description
The issue concerns Incorrect Access Control. When a sub group epic is added to a public group, an issue arises.
Recommendations
For GitLab Community and Enterprise Edition versions 11.3 through 12.3, update to a version that contains a fix for this issue to resolve the Incorrect Access Control problem.
Found an issue in the description? Have something to add? Feel free to write us 👾