CyberRota Analysis
AI-GeneratedGitLab versions from 17.9 up to 19.2.7, 19.3 up to 19.3.3, and 19.4 up to 19.4.1 are vulnerable due to improper authorization enforcement, allowing authenticated users with guest-level permissions to access private security policy content. This could lead to unauthorized exposure of sensitive information, potentially impacting the confidentiality of security policies. Organizations using affected versions should prioritize remediation to protect against potential data leaks.
Original NVD Description
GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with guest-level permissions to read private security policy content they were not authorized to access due to improper authorization enforcement.
Related CVEs
Other vulnerabilities affecting the same vendor(s)