Home Tools CVE CVE-2018-20144
HIGH

CVE-2018-20144

Gitlab GitLab 2019-03-28 CVSS v3.0
CVSS
7.5

Description

GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control.

Weakness (CWE)

CWE-22 Path Traversal

EPSS Score

2.21%
Probability of exploitation in next 30 days
81.8th percentile

References

https://about.gitlab.com/2018/12/13/critical-security-release-gitlab-11-dot-5-dot-4-released/ Vendor Advisory https://about.gitlab.com/blog/categories/releases/ Product, Vendor Advisory https://gitlab.com/gitlab-org/gitlab-ce/issues/55200 Exploit, Vendor Advisory
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE