Unrated severityNVD Advisory· Published Apr 15, 2023· Updated Feb 6, 2025
CVE-2018-17455
CVE-2018-17455
Description
An issue was discovered in GitLab Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers could obtain sensitive information about group names, avatars, LDAP settings, and descriptions via an insecure direct object reference to the "merge request approvals" feature.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- GitLab/GitLab Enterprise Editiondescription
- Range: <11.1.7 || >=11.2.0 <11.2.4 || >=11.3.0 <11.3.1
- osv-coords4 versionspkg:apk/chainguard/gitlab-operatorpkg:apk/chainguard/gitlab-operator-chartspkg:apk/chainguard/gitlab-operator-compatpkg:apk/chainguard/gitlab-operator-fips
< 0+ 3 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.