CVE-2018-20144

GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control. (CVE-2018-20144)

Description

GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control.

Source: CVELISTV5 NVD

Metrics

Severity

high

86.41

—

Exploit maturity

no public PoC known

XIEM Effective CVSS

7.5

Source: nvd-v3

7.5

—

EPSS percentile

81.5 %

Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).

2.2 %

Moderate — model estimates 1-10% exploitation likelihood.

Published

2019-03-28 14:53 UTC

—

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

gitlab
gitlab11.0.0 – 11.3.13
gitlab
gitlab11.4.0 – 11.4.11
gitlab
gitlab11.5.0 – 11.5.4

References & sources

IDCVE-2018-20144