Not rated
CVE-2019-5474 An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval…
Description
An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GitLab EE | Versions not published |
Other CVEs of GitLab EE
The 10 CVEs of GitLab EE →
CVE-2021-22240
Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on…
4.2
Medium
CVE-2020-26412
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics…
3.1
Low
CVE-2020-26416
Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms…
4.0
Medium
CVE-2020-13349
An issue has been discovered in GitLab EE affecting all versions starting from 8.12
4.3
Medium