CVE-2019-11548
published 2019-09-09CVE-2019-11548: An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able…
PriorityP427medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.71%
49.2th percentile
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 11.8.9+dfsg-1 (sid) | gitlab 11.8.9+dfsg-1 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 5.4.0 < 11.8.9 | 11.8.9 |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
nvdv2.03.5LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
osv5.4MEDIUM
vendor_debian5.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j8qf-xxg6-jf5p: An issue was discovered in GitLab Community and Enterprise Edition before 11
ghsa_unreviewed·2022-05-24
CVE-2019-11548 [MEDIUM] CWE-79 GHSA-j8qf-xxg6-jf5p: An issue was discovered in GitLab Community and Enterprise Edition before 11
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint.
OSV
CVE-2019-11548: An issue was discovered in GitLab Community and Enterprise Edition before 11
osv·2019-09-09·CVSS 5.4
CVE-2019-11548 [MEDIUM] CVE-2019-11548: An issue was discovered in GitLab Community and Enterprise Edition before 11
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint.
GitLab
CVE-2019-11548: An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project a
vendor_gitlab·2019-09-09·CVSS 5.4
CVE-2019-11548 [MEDIUM] CWE-79 CVE-2019-11548: An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project a
CVE-2019-11548: An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint.
Debian
CVE-2019-11548: gitlab - An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9...
vendor_debian·2019·CVSS 5.4
CVE-2019-11548 [MEDIUM] CVE-2019-11548: gitlab - An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9...
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint.
Scope: local
sid: resolved (fixed in 11.8.9+dfsg-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-09-09
Published