CyberRota Analysis
AI-GeneratedGitLab versions prior to 18.11.7, 19.0.4, and 19.1.2 are vulnerable to improper authorization in specific GraphQL operations, allowing authenticated users with auditor-level access to alter compliance violation records. While the severity is rated low, organizations using affected versions should prioritize remediation to prevent potential manipulation of compliance data. Users with auditor-level access in compliance-sensitive environments should particularly focus on applying the necessary updates.
Original NVD Description
GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with auditor-level access to modify compliance violation records due to improper authorization on certain GraphQL operations.
Related CVEs
Other vulnerabilities affecting the same vendor(s)