CVE-2019-5472
28.01.2020, 03:15
An authorization issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 that prevented owners and maintainer to delete epic comments.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 11.11.0 ≤ 𝑥 < 11.11.6 |
| gitlab | gitlab | 11.11.0 ≤ 𝑥 < 11.11.6 |
| gitlab | gitlab | 12.0.0 ≤ 𝑥 < 12.0.4 |
| gitlab | gitlab | 12.0.0 ≤ 𝑥 < 12.0.4 |
| gitlab | gitlab | 12.1.0 ≤ 𝑥 < 12.1.2 |
| gitlab | gitlab | 12.1.0 ≤ 𝑥 < 12.1.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
- CWE-269 - Improper Privilege ManagementThe software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
References