CVE-2019-15731
EUVD-2019-666716.09.2019, 17:15
An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non-members were able to comment on merge requests despite the repository being set to allow only project members to do so.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 12.0.0 ≤ 𝑥 < 12.0.8 |
| gitlab | gitlab | 12.0.0 ≤ 𝑥 < 12.0.8 |
| gitlab | gitlab | 12.1.0 ≤ 𝑥 < 12.1.8 |
| gitlab | gitlab | 12.1.0 ≤ 𝑥 < 12.1.8 |
| gitlab | gitlab | 12.2.0 ≤ 𝑥 < 12.2.3 |
| gitlab | gitlab | 12.2.0 ≤ 𝑥 < 12.2.3 |
𝑥
= Vulnerable software versions
