CyberRota Analysis
AI-GeneratedGitLab versions prior to 19.0.5, 19.1.3, and 19.2.1 are vulnerable to improper access control, allowing authenticated users with guest-role permissions to view unauthorized test report contents. This could lead to exposure of sensitive information within the test reports. Organizations using affected versions should prioritize remediation to mitigate potential data leaks.
Original NVD Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with guest-role permissions to access test report contents they were not authorized to view due to improper access control enforcement.
Related CVEs
Other vulnerabilities affecting the same vendor(s)