{"id":"CVE-2019-9756","details":"An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control, a different vulnerability than CVE-2019-9732.","modified":"2026-08-27T19:00:09.557996Z","published":"2019-04-17T17:29:01.537Z","references":[{"type":"ADVISORY","url":"https://about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/"},{"type":"ADVISORY","url":"https://about.gitlab.com/blog/categories/releases/"},{"type":"EVIDENCE","url":"https://gitlab.com/gitlab-org/gitlab-ce/issues/54243"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.com/gitlab-org/gitlab","events":[{"introduced":"342f33beb2ce090cfabfd0a5e7327b78d04588bb"},{"last_affected":"075705a5f3bd9748d92cf48073bfe9e79b58f385"},{"introduced":"c6f72ac9a88521257991aa9a0cc6d558126f5bb9"},{"fixed":"0a5900e492dd1a35f10af21f1c5d79de12484357"},{"introduced":"002a28279f5b3fd229f929bb1f40eb7b5fc87ee9"},{"fixed":"39d0b2ef98d4dfb79a86d185ae23cb1a67e689aa"}],"database_specific":{"cpe":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*"],"extracted_events":[{"introduced":"10.8.0"},{"last_affected":"10.8.7"},{"introduced":"11.0.0"},{"fixed":"11.6.10"},{"introduced":"11.8.0"},{"fixed":"11.8.1"}],"source":"CPE_RANGE"}}],"versions":["v11.8.0-ee"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9756.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}