High severity8.8OSV Advisory· Published Apr 25, 2019· Updated Jun 17, 2026
CVE-2018-19359
CVE-2018-19359
Description
GitLab Community and Enterprise Edition 8.9 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 has Incorrect Access Control.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
29v1.2.0, v1.2.0pre, v1.2.1, …+ 26 more
- (no CPE)range: v1.2.0, v1.2.0pre, v1.2.1, …
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=11.3.0,<11.3.10
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=11.3.0,<11.3.10
- cpe:2.3:a:gitlab:gitlab:11.5.0:-:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:-:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc10:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc10:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc11:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc11:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc1:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc1:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc2:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc2:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc3:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc3:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc4:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc4:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc5:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc5:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc6:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc6:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc7:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc7:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc8:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc8:*:*:enterprise:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc9:*:*:community:*:*:*
- cpe:2.3:a:gitlab:gitlab:11.5.0:rc9:*:*:enterprise:*:*:*
- Range: >=8.9 and <11.5.0-rc12, <11.4.6, <11.3.10
- Range: >=8.9 and <11.5.0-rc12, <11.4.6, <11.3.10
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/gitlab-ce/issues/54189nvdExploitPatch
- about.gitlab.com/2018/11/19/critical-security-release-gitlab-11-dot-4-dot-6-released/nvdVendor Advisory
- about.gitlab.com/blog/categories/releases/nvdVendor Advisory
News mentions
0No linked articles in our index yet.