CVE-2019-7353

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2019-7353

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-7353.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2019-7353

Published

2019-05-17T17:29:00.920Z

Modified

2026-03-14T11:13:16.398903Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator

Summary

[none]

Details

An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 11.7.x before 11.7.4. GitLab Releases were vulnerable to an authorization issue that allowed users to view confidential issue and merge request titles of other projects.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type

GIT

Repo

https://gitlab.com/gitlab-org/gitlab

Events

Introduced

c02f0d47774ac40ee0d1097d00d7980ef0c7012c

Fixed

3a39cd41e1b89b297ef3cb1288a0a9edcda79135

Introduced

c02f0d47774ac40ee0d1097d00d7980ef0c7012c

Fixed

3a39cd41e1b89b297ef3cb1288a0a9edcda79135

Database specific

{
    "versions": [
        {
            "introduced": "11.7.0"
        },
        {
            "fixed": "11.7.4"
        },
        {
            "introduced": "11.7.0"
        },
        {
            "fixed": "11.7.4"
        }
    ]
}

Affected versions

v11.*

v11.7.0-ee

v11.7.1-ee

v11.7.2-ee

v11.7.3-ee

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-7353.json"