CVE-2018-19569

GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an authorization vulnerability tha...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an authorization vulnerability that allows access to the web-UI as a user using a Personal Access Token of any scope.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory securityfocus.com
advisory about.gitlab.com
report gitlab.com