CVE-2019-9756

critical

Description

An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control, a different vulnerability than CVE-2019-9732.

References

https://gitlab.com/gitlab-org/gitlab-ce/issues/54243

https://about.gitlab.com/blog/categories/releases/

https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/

Details

Source: Mitre, NVD

Published: 2019-04-17

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00471

Detections

Analytics