CyberRota Analysis
AI-GeneratedGitLab versions prior to 19.2.8, 19.3.5, and 19.4.2 are vulnerable to unauthorized access, allowing unauthenticated users to read internal and confidential notes on public projects through a flaw in the GraphQL API. This could lead to the exposure of sensitive project information, impacting the confidentiality of project data. Organizations using affected versions should prioritize remediation to mitigate potential data leaks.
Original NVD Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read internal notes and confidential system notes on public projects due to improper authorization in the GraphQL API.
Related CVEs
Other vulnerabilities affecting the same vendor(s)