CVE-2018-19359

6.5

MEDIUMCVSS v2

Published

April 25, 2019

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control.

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

= 11.5.0, >= 11.4.7, <= 11.4.9, >= 11.3.0, < 11.3.10, >= 11.4.0, < 11.4.6NVD

NPMsemantic-release plugin to publish a GitLab release

= 11.5.0, >= 11.4.7, <= 11.4.9, >= 11.3.0, < 11.3.10, >= 11.4.0, < 11.4.6NVD

GitHub

:fox_face: semantic-release plugin to publish a GitLab release

= 11.5.0, >= 11.4.7, <= 11.4.9, >= 11.3.0, < 11.3.10, >= 11.4.0, < 11.4.6NVD

Python Package IndexGet GitLab user Details

= 11.5.0, >= 11.4.7, <= 11.4.9, >= 11.3.0, < 11.3.10, >= 11.4.0, < 11.4.6NVD

Crates.ioGitlab API client.

= 11.5.0, >= 11.4.7, <= 11.4.9, >= 11.3.0, < 11.3.10, >= 11.4.0, < 11.4.6NVD

RubyGemsRuby client and CLI for GitLab API

= 11.5.0, >= 11.4.7, <= 11.4.9, >= 11.3.0, < 11.3.10, >= 11.4.0, < 11.4.6NVD

GitHubRuby wrapper and CLI for the GitLab REST API

= 11.5.0, >= 11.4.7, <= 11.4.9, >= 11.3.0, < 11.3.10, >= 11.4.0, < 11.4.6NVD