High severity7.5NVD Advisory· Published Jul 10, 2019· Updated Jun 17, 2026

CVE-2018-19581

Description

GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerability that allows a Guest user to set the weight of an issue they create.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GitLab Inc./GitLab
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
Range: >=8.3.0,<11.3.11
GitLab/GitLab EEdescription
GitLab Inc./gitlab-org/gitlab-eellm-fuzzy
Range: 8.3 <= versions < 11.3.11, 11.4 < versions < 11.4.8, 11.5 < versions < 11.5.1

Patches

Vulnerability mechanics

References

about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/nvdRelease NotesVendor Advisory
gitlab.com/gitlab-org/gitlab-ee/issues/7696nvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000