Authorization Bypass Vulnerability in GitLab CE/EE

CVE-2018-19569 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an authorization vulnerability that allows access to the web-UI as a user using a Personal Access Token of any scope.

Learn more about our Web App Pen Testing.