CVE-2018-19575

GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an insecure direct object referen...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an insecure direct object reference issue that allows a user to make comments on a locked issue.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory securityfocus.com
advisory about.gitlab.com
report gitlab.com