CVE-2018-19584

HIGH · CVSS 7.5 EPSS 1.54%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-07-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-19584

Severity

HIGH

CVSS

7.5

EPSS

1.54%

GitLab

Original NVD Description

GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that allows authenticated, but unauthorized, users to view members and milestone details of private groups.