Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-7353
6.4
MEDIUMCVSS v2
Published
May 17, 2019
Affected
7 projects
Assigned by
MITRE
Severity scale
010
Description
An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 11.7.x before 11.7.4. GitLab Releases were vulnerable to an authorization issue that allowed users to view confidential issue and merge request titles of other projects.
gitlab
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.
NPMFull NodeJS implementation of the GitLab API. Supports Promises, Async/Await.>= 11.7.0, < 11.7.4NVD
@semantic-release/gitlabNPMsemantic-release plugin to publish a GitLab release
NPMsemantic-release plugin to publish a GitLab release>= 11.7.0, < 11.7.4NVD
semantic-release/gitlab
GitHub
Crates.io
RubyGems