CyberRota Analysis
AI-GeneratedGitLab versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2 are vulnerable to a flaw that may permit unauthenticated users to access work item contents in private groups and projects due to improper authorization checks. This vulnerability could lead to unauthorized data exposure, impacting the confidentiality of sensitive project information. Organizations using affected GitLab versions should prioritize remediation to safeguard their private data.
Original NVD Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read work item contents from private groups and projects due to incorrect authorization checks.
Related CVEs
Other vulnerabilities affecting the same vendor(s)