CVE-2018-19581

—

CVSS 3.0

7.5 high

EPSS

1%p64

Published

Jul 10, 2019 (Jul 10, 2019)

Modified

Jun 17, 2026

Description

GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerability that allows a Guest user to set the weight of an issue they create.

Vendors: gitlab
Products: gitlab
Weakness: CWE-285
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.