CVE-2018-20144

5

MEDIUMCVSS v2

Published

March 28, 2019

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control.

NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.

>= 11.0.0, < 11.3.13, >= 11.4.0, < 11.4.11, >= 11.5.0, < 11.5.4NVD

NPMsemantic-release plugin to publish a GitLab release

>= 11.0.0, < 11.3.13, >= 11.4.0, < 11.4.11, >= 11.5.0, < 11.5.4NVD

GitHub

:fox_face: semantic-release plugin to publish a GitLab release

>= 11.0.0, < 11.3.13, >= 11.4.0, < 11.4.11, >= 11.5.0, < 11.5.4NVD

Python Package IndexGet GitLab user Details

>= 11.0.0, < 11.3.13, >= 11.4.0, < 11.4.11, >= 11.5.0, < 11.5.4NVD

Crates.ioGitlab API client.

>= 11.0.0, < 11.3.13, >= 11.4.0, < 11.4.11, >= 11.5.0, < 11.5.4NVD

RubyGemsRuby client and CLI for GitLab API

>= 11.0.0, < 11.3.13, >= 11.4.0, < 11.4.11, >= 11.5.0, < 11.5.4NVD

GitHubRuby wrapper and CLI for the GitLab REST API

>= 11.0.0, < 11.3.13, >= 11.4.0, < 11.4.11, >= 11.5.0, < 11.5.4NVD