CVE-2019-6791: Medium severity gitlab vulnerability
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control (issue 3 of 3). When a project with visibility more permissive than the target group is imported, it will retain its prior visibility.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-6791?
CVE-2019-6791 has a medium severity due to its incorrect access control vulnerability.
How do I fix CVE-2019-6791?
To fix CVE-2019-6791, upgrade your GitLab instance to version 11.5.8, 11.6.6, or 11.7.1 or later.
What versions are affected by CVE-2019-6791?
CVE-2019-6791 affects GitLab Community and Enterprise Editions prior to 11.5.8, 11.6.6, and 11.7.1.
What is the impact of CVE-2019-6791?
The impact of CVE-2019-6791 allows an imported project to retain a more permissive visibility than intended.
Is CVE-2019-6791 a serious issue for GitLab users?
Yes, CVE-2019-6791 is a serious issue as it can lead to unauthorized access to private project information.