CVE-2019-5474

An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden withou...

Original description

The description as published by the source.

An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch about.gitlab.com
report hackerone.com
report gitlab.com