CoreCVE
Back

HIGH

GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that allows authenticated, but unauthorized, users to view members and milestone details of private groups

Published Jul 10, 2019

Description

GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that allows authenticated, but unauthorized, users to view members and milestone details of private groups.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-639

Authorization Bypass

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 10, 2019
Updated Aug 5, 2024
Reserved Nov 26, 2018
Link CVE-2018-19584
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-19584
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-19584