CVE-2018-19496: Medium severity gitlab vulnerability
An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access control vulnerability that permits a user with insufficient privileges to promote a project milestone to a group milestone.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19496?
CVE-2018-19496 has a medium severity due to the potential for unauthorized promotion of project milestones.
How do I fix CVE-2018-19496?
To fix CVE-2018-19496, upgrade GitLab to version 11.3.11, 11.4.8 or 11.5.1 or later.
Which versions are affected by CVE-2018-19496?
CVE-2018-19496 affects GitLab Community and Enterprise Edition versions 10.x and 11.x prior to 11.3.11, 11.4.x prior to 11.4.8, and 11.5.x prior to 11.5.1.
What type of vulnerability is CVE-2018-19496?
CVE-2018-19496 is an incorrect access control vulnerability.
Can CVE-2018-19496 lead to privilege escalation?
Yes, CVE-2018-19496 can lead to privilege escalation by allowing users with insufficient rights to promote milestones.