cve/2018/CVE-2018-19584.md
2024-06-18 02:51:15 +02:00

734 B

CVE-2018-19584

Description

GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that allows authenticated, but unauthorized, users to view members and milestone details of private groups.

POC

Reference

Github

No PoCs found on GitHub currently.