Medium severity4.3NVD Advisory· Published Nov 26, 2019· Updated Jun 17, 2026
CVE-2019-18461
CVE-2019-18461
Description
An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.3 when a sub group epic is added to a public group. It has Incorrect Access Control.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 1 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=11.3.0,<=12.3.0
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=11.3.0,<=12.3.0
- GitLab/GitLab Community and Enterprise Editiondescription
- Range: 11.3 - 12.3
Patches
Vulnerability mechanics
References
2- about.gitlab.com/blog/2019/10/30/security-release-gitlab-12-dot-4-dot-1-released/nvdVendor Advisory
- about.gitlab.com/blog/categories/releases/nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.