CVE-2018-19584

PoC —

CVSS 3.0

7.5 high

EPSS

2%p73

Published

Jul 10, 2019 (Jul 10, 2019)

Modified

Jun 17, 2026

Description

GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that allows authenticated, but unauthorized, users to view members and milestone details of private groups.

Vendors: gitlab
Products: gitlab
Weakness: CWE-639
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.