Lucene search

K
cvelistMitreCVELIST:CVE-2019-6996
HistorySep 09, 2019 - 7:56 p.m.

CVE-2019-6996

2019-09-0919:56:09
mitre
www.cve.org

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

An issue was discovered in GitLab Enterprise Edition 10.x (starting in 10.6) and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. The merge request approvers section has an access control issue that permits project maintainers to view membership of private groups.

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%