CVE-2018-19496

An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access control vulnerability that permits a user with insufficient privileges to promote a project milestone to a group milestone.

packagechannelchannel versionpkg versionstatus
gitlab
nixos-18.03
2019-02-20 10:25:14 UTC (cb0e20)10.7.0vulnerable
2019-01-16 18:00:31 UTC (138f2c)10.7.0vulnerable
2018-12-09 06:05:37 UTC (b551f8)10.7.0vulnerable
2018-11-29 21:00:31 UTC (a18112)10.7.0vulnerable
2018-11-28 06:10:25 UTC (9c96d1)10.7.0vulnerable
2018-11-23 12:45:42 UTC (e64482)10.7.0vulnerable
2018-11-20 12:35:27 UTC (947247)10.7.0vulnerable
2018-11-16 21:00:27 UTC (263f7b)10.7.0vulnerable
2018-11-14 10:35:19 UTC (1d8470)10.7.0vulnerable
2018-11-05 13:10:34 UTC (21b7f5)10.7.0vulnerable
2018-11-02 08:50:28 UTC (0e614d)10.7.0vulnerable
2018-10-30 16:25:07 UTC (19fc6d)10.7.0vulnerable
2018-10-30 14:40:31 UTC (6f07d2)10.7.0vulnerable
2018-10-28 11:35:42 UTC (b4e3a4)10.7.0vulnerable
2018-10-15 12:50:34 UTC (5d19e3)10.7.0vulnerable
2018-10-13 20:20:17 UTC (e85e0c)10.7.0vulnerable
2018-10-13 09:40:17 UTC (d592f2)10.7.0vulnerable
2018-10-11 15:15:08 UTC (5a38f7)10.7.0vulnerable
2018-10-09 11:20:30 UTC (c56ede)10.7.0vulnerable
2018-10-05 13:25:12 UTC (862fb5)10.7.0vulnerable
2018-10-05 13:00:32 UTC (c4eddc)10.7.0vulnerable
2018-09-21 06:10:31 UTC (d16a7a)10.7.0vulnerable
2018-09-19 17:10:27 UTC (8edf56)10.7.0vulnerable
2018-09-18 17:55:38 UTC (305f13)10.7.0vulnerable
2018-09-16 07:30:36 UTC (01f5e7)10.7.0vulnerable
2018-09-13 15:30:12 UTC (5f59ab)10.7.0vulnerable
2018-09-08 09:20:09 UTC (45f52f)10.7.0vulnerable
2018-09-02 21:10:32 UTC (8b92a4)10.7.0vulnerable
2018-09-02 14:20:10 UTC (8c172c)10.7.0vulnerable
2018-09-01 13:55:20 UTC (a960b8)10.7.0vulnerable
2018-08-31 04:20:38 UTC (a37638)10.7.0vulnerable
2018-08-29 17:10:10 UTC (edd63e)10.7.0vulnerable
2018-08-24 19:10:30 UTC (fde201)10.7.0vulnerable
2018-08-23 23:50:20 UTC (f094fd)10.7.0vulnerable
2018-08-19 18:15:22 UTC (4df342)10.7.0vulnerable
2018-08-18 23:45:22 UTC (47b68d)10.7.0vulnerable
2018-08-17 21:25:22 UTC (a4e068)10.7.0vulnerable
2018-08-17 14:30:05 UTC (cd0cd9)10.7.0vulnerable
2018-08-16 13:20:15 UTC (c1ef96)10.7.0vulnerable
2018-08-16 08:30:34 UTC (8b4ed6)10.7.0vulnerable
2018-08-15 15:40:37 UTC (5b8a24)10.7.0vulnerable
2018-08-15 05:50:22 UTC (66bd47)10.7.0vulnerable
2018-08-14 17:35:19 UTC (9cbc73)10.7.0vulnerable
2018-08-13 09:25:26 UTC (10b979)10.7.0vulnerable
2018-08-13 03:20:34 UTC (89ff9f)10.7.0vulnerable
2018-08-12 04:35:15 UTC (bfeab2)10.7.0vulnerable
2018-08-12 00:00:33 UTC (190ec7)10.7.0vulnerable
2018-08-10 22:20:22 UTC (e42c07)10.7.0vulnerable
2018-08-10 17:05:22 UTC (2c3f9c)10.7.0vulnerable
2018-08-09 21:05:22 UTC (3af001)10.7.0vulnerable
2018-08-07 05:10:16 UTC (230f98)10.7.0vulnerable
2018-08-03 03:05:12 UTC (d0c868)10.7.0vulnerable
2018-08-02 12:45:41 UTC (18401b)10.7.0vulnerable
2018-08-02 06:10:24 UTC (0e55dd)10.7.0vulnerable
2018-08-01 00:55:32 UTC (a1299c)10.7.0vulnerable
2018-07-31 16:00:28 UTC (b74b1c)10.7.0vulnerable
2018-07-30 09:15:16 UTC (6115f4)10.7.0vulnerable
2018-07-20 17:40:08 UTC (d6c6c7)10.7.0vulnerable
2018-07-12 04:35:08 UTC (411cc5)10.7.0vulnerable
2018-07-10 08:10:12 UTC (aec217)10.7.0vulnerable
2018-07-10 03:15:29 UTC (5e10df)10.7.0vulnerable
2018-07-09 02:40:20 UTC (e930c6)10.7.0vulnerable
2018-07-08 17:55:36 UTC (de7ca4)10.7.0vulnerable
2018-07-08 10:25:33 UTC (298e17)10.7.0vulnerable
2018-07-04 20:00:25 UTC (56fad1)10.7.0vulnerable
2018-06-30 13:55:14 UTC (2f06e0)10.7.0vulnerable
2018-06-29 17:10:06 UTC (0a70d6)10.7.0vulnerable
2018-06-25 10:30:35 UTC (94d80e)10.7.0vulnerable
2018-06-23 08:30:21 UTC (91b286)10.7.0vulnerable
2018-06-21 23:25:24 UTC (68e02f)10.7.0vulnerable
2018-06-17 01:05:39 UTC (14c248)10.7.0vulnerable
2018-06-16 09:40:33 UTC (f3c913)10.7.0vulnerable
2018-06-14 21:57:20 UTC (08d245)10.7.0vulnerable
nixos-18.09
2018-12-03 23:00:39 UTC (d45a0d)11.5.0vulnerable
2018-11-28 18:30:30 UTC (db561c)11.4.4vulnerable
2018-11-27 11:15:39 UTC (a7fd43)11.4.4vulnerable
2018-11-24 13:20:41 UTC (5d4a1a)11.4.4vulnerable
2018-11-23 21:25:45 UTC (636b2b)11.4.4vulnerable
2018-11-23 04:15:38 UTC (51076e)11.4.4vulnerable
2018-11-22 13:30:46 UTC (21517c)11.4.4vulnerable
2018-11-21 18:45:31 UTC (03dc64)11.4.4vulnerable
2018-11-20 16:00:56 UTC (c1427b)11.4.4vulnerable
2018-11-19 17:20:31 UTC (50fb68)11.4.4vulnerable
2018-11-18 09:35:45 UTC (b37872)11.4.4vulnerable
2018-11-18 08:50:25 UTC (34ff87)11.4.4vulnerable
2018-11-08 03:40:17 UTC (a4c4cb)11.4.4vulnerable
2018-11-06 06:40:34 UTC (6d6e4e)11.4.4vulnerable
2018-11-06 02:35:23 UTC (450792)11.4.4vulnerable
2018-11-05 08:35:13 UTC (bf7930)11.4.4vulnerable
2018-11-04 07:05:13 UTC (9ea650)11.4.4vulnerable
2018-11-04 02:50:34 UTC (98c115)11.4.3vulnerable
2018-10-30 02:10:12 UTC (06fb02)11.3.4vulnerable
2018-10-18 19:40:14 UTC (091950)11.3.4vulnerable
2018-10-18 10:30:20 UTC (81f5c2)11.3.4vulnerable
2018-10-15 13:45:23 UTC (c06f53)11.3.4vulnerable
2018-10-15 06:05:18 UTC (08005e)11.3.4vulnerable
2018-10-14 13:15:18 UTC (d96c7a)11.3.4vulnerable
2018-10-11 07:15:22 UTC (4dd9cd)11.3.0vulnerable
2018-10-10 16:15:30 UTC (8cfce9)11.3.0vulnerable
2018-10-10 03:00:34 UTC (59fe4c)11.3.0vulnerable
2018-10-09 20:05:32 UTC (de37b4)11.3.0vulnerable
2018-10-09 08:40:17 UTC (1ada6f)11.3.0vulnerable
2018-10-08 20:00:22 UTC (21293d)11.3.0vulnerable
2018-10-08 13:30:11 UTC (617607)11.3.0vulnerable
2018-10-06 23:30:25 UTC (299814)11.3.0vulnerable
2018-10-06 14:10:32 UTC (6a3f5b)11.3.0vulnerable
2018-10-04 13:05:14 UTC (6cbd1e)11.3.0vulnerable
2018-10-03 08:15:23 UTC (7f70eb)11.3.0vulnerable
2018-10-02 19:55:28 UTC (3e44d2)11.3.0vulnerable
2018-10-02 09:45:23 UTC (66fd61)11.3.0vulnerable
2018-10-02 01:05:40 UTC (10eec0)11.3.0vulnerable
2018-10-01 11:30:25 UTC (b550b7)11.3.0vulnerable
2018-10-01 08:35:23 UTC (0f1911)11.3.0vulnerable
2018-10-01 03:05:17 UTC (26537f)11.3.0vulnerable
2018-09-29 14:15:10 UTC (c922e2)11.3.0vulnerable
2018-09-28 06:20:12 UTC (376891)11.3.0vulnerable
2018-09-27 11:35:18 UTC (3c85e5)11.3.0vulnerable
2018-09-27 08:15:14 UTC (d26e83)11.3.0vulnerable
2018-09-26 15:15:11 UTC (29660a)11.3.0vulnerable
2018-09-26 03:35:36 UTC (391bf8)11.3.0vulnerable
2018-09-25 20:25:23 UTC (358326)11.3.0vulnerable
2018-09-25 15:25:44 UTC (69514d)11.3.0vulnerable
2018-09-24 12:35:11 UTC (e49665)10.8.0vulnerable
2018-09-21 09:35:13 UTC (ef450e)10.8.0vulnerable
2018-09-21 05:20:41 UTC (40d22a)10.8.0vulnerable
2018-09-15 00:45:23 UTC (9fa6a2)10.8.0vulnerable
2018-09-14 18:55:29 UTC (221ec6)10.8.0vulnerable
2018-09-12 22:40:23 UTC (32c008)10.8.0vulnerable
2018-09-12 08:15:39 UTC (8468a4)10.8.0vulnerable
2018-09-06 08:40:22 UTC (6f3bd5)10.8.0vulnerable
2018-09-06 03:15:12 UTC (a01552)10.8.0vulnerable
2018-09-05 18:45:13 UTC (dea9a0)10.8.0vulnerable
2018-09-03 23:20:16 UTC (c0bde6)10.8.0vulnerable
nixos-unstable
2018-12-03 19:45:42 UTC (7c73f5)11.5.0vulnerable
2018-11-17 20:10:32 UTC (80738e)11.4.4vulnerable
2018-11-08 10:00:24 UTC (614193)11.4.4vulnerable
2018-11-04 23:10:32 UTC (179b81)11.4.4vulnerable
2018-10-31 09:20:24 UTC (c70ad8)11.3.4vulnerable
2018-10-16 16:35:39 UTC (45a419)11.3.4vulnerable
2018-10-14 10:25:34 UTC (32bcd7)11.3.4vulnerable
2018-10-05 04:00:11 UTC (0a7e25)11.3.0vulnerable
2018-10-04 07:55:22 UTC (f2b3bb)11.3.0vulnerable
2018-10-03 17:00:26 UTC (13b290)11.3.0vulnerable
2018-09-28 02:05:44 UTC (46651b)11.3.0vulnerable
2018-09-27 09:35:18 UTC (a70d3b)11.3.0vulnerable
2018-09-22 02:40:19 UTC (7df10f)10.8.0vulnerable
2018-09-21 13:25:18 UTC (06df7c)10.8.0vulnerable
2018-09-20 00:25:11 UTC (5664e6)10.8.0vulnerable
2018-09-15 16:35:21 UTC (218ce4)10.8.0vulnerable
2018-09-15 00:25:23 UTC (3c5788)10.8.0vulnerable
2018-09-13 09:20:13 UTC (56b9f6)10.8.0vulnerable
2018-09-06 12:05:23 UTC (ca2ba4)10.8.0vulnerable
2018-08-31 20:00:16 UTC (083220)10.8.0vulnerable
2018-08-24 12:50:09 UTC (7db611)10.8.0vulnerable
2018-08-17 11:25:34 UTC (8395f9)10.8.0vulnerable
2018-08-13 14:40:22 UTC (6afd19)10.8.0vulnerable
2018-08-13 09:35:37 UTC (a01850)10.8.0vulnerable
2018-08-12 20:15:12 UTC (4af9ee)10.8.0vulnerable
2018-08-12 02:10:25 UTC (b5b11e)10.8.0vulnerable
2018-08-11 19:25:19 UTC (bd4ef2)10.8.0vulnerable
2018-08-02 04:50:18 UTC (2428f5)10.8.0vulnerable
2018-07-31 15:45:38 UTC (7c5852)10.8.0vulnerable
2018-07-11 16:40:22 UTC (dae9cf)10.8.0vulnerable
2018-07-08 19:55:08 UTC (2a8a55)10.8.0vulnerable
2018-07-08 16:40:22 UTC (784f54)10.8.0vulnerable
2018-07-06 19:55:40 UTC (fda46a)10.8.0vulnerable
2018-07-02 04:50:18 UTC (be1461)10.8.0vulnerable
2018-07-01 00:20:18 UTC (687f5d)10.8.0vulnerable
2018-06-30 12:30:34 UTC (85497a)10.8.0vulnerable
2018-06-29 19:45:17 UTC (e686bd)10.8.0vulnerable
2018-06-22 13:15:24 UTC (a8c710)10.8.0vulnerable
2018-06-14 21:57:20 UTC (4b649a)10.8.0vulnerable