CVE-2018-18647 — Missing Authorization in Gitlab

CWE-862 — Missing Authorization4 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.1%
top 75.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
GitlabDebian Gitlab
Timeline
PublishedDec 4
Latest updateMay 13

Description

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Missing Authorization.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

▶NVDgitlab/gitlab8.11 — 11.2.7+2
▶debiandebian/gitlab
▶gitlabgitlab/gitlab

Patches

Patch: gitlab.com ↗Patch: gitlab.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-3frq-wfvj-c4fp: An issue was discovered in GitLab Community and Enterprise Edition before 11↗2022-05-13
▶

📋Vendor Advisories

2
GitLab
CVE-2018-18647: An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Missing Autho↗2018-12-04
▶
Debian
CVE-2018-18647: gitlab - An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7...↗2018
▶