CRITICAL
CVE-2019-9218
CVSS
9.8
Description
An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 1 of 5).
Summary dbcve.org
GitLab Community and Enterprise Edition contains an Incorrect Access Control vulnerability allowing unauthorized access. The flaw is exploitable without authentication and affects versions prior to 11.6.10, 11.7.6, and 11.8.1. This is one of five access control issues addressed in the security release.
Mitigation
Upgrade GitLab to version 11.6.10, 11.7.6, 11.8.1, or later to resolve the access control vulnerability.
EPSS Score
1.64%
Probability of exploitation in next 30 days
75.3th percentile
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.