CVE-2019-11548
CVE-2019-11548
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint.
CVSS 5.4 · Media · EPSS 0,7%
- Publicación
- Actualización
Pila tecnológica: system