MEDIUM
CVE-2018-20507
CVSS
5.3
Description
An issue was discovered in GitLab Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control.
Weakness (CWE)
CWE-306
Missing Authentication
EPSS Score
0.77%
Probability of exploitation in next 30 days
54th percentile
References
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.