CVE-2019-18453 - An issue was discovered in GitLab Community and Enterprise Edition 11.6 through 12.4 in the add comments via email feature

Back Back to CVE browser

MEDIUM

An issue was discovered in GitLab Community and Enterprise Edition 11.6 through 12.4 in the add comments via email feature

Published Nov 26, 2019

4.3

MEDIUM

CVSS 3.1

EPSS 0.59%

Description

An issue was discovered in GitLab Community and Enterprise Edition 11.6 through 12.4 in the add comments via email feature. It has Insecure Permissions.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (3)

https://about.gitlab.com/blog/2019/10/30/security-release-gitlab-12-dot-4-dot-1-released/
x_refsource_MISCVendor Advisory
https://about.gitlab.com/blog/categories/releases/
x_refsource_MISCRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8203
Advisory

Link	Providers	Tags
https://about.gitlab.com/blog/2019/10/30/security-release-gitlab-12-dot-4-dot-1-released/		x_refsource_MISCVendor Advisory
https://about.gitlab.com/blog/categories/releases/		x_refsource_MISCRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8203		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 26, 2019

Updated Aug 5, 2024

Reserved Oct 25, 2019

Link CVE-2019-18453

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-18453

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 26, 2019

Updated Aug 5, 2024

Link EUVD-2019-8203

GitHub

No data