High severity8.8OSV Advisory· Published Apr 24, 2019· Updated Jun 17, 2026

CVE-2019-11218

Description

Improper handling of extra parameters in the AccountController (User Profile edit) in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jakubgarfield/Bonobo Git ServerOSV
Range: 3.4.2, 3.4.3, 3.5.0, …
Jakub Chodounsky/Bonobo Git Serverllm-create
Range: <6.5.0

Patches

Vulnerability mechanics

References

bonobogitserver.com/changelog/nvdRelease NotesThird Party Advisory
flab.cesnet.cz/advisories/cve-2019-11218nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000