CVE-2018-20144: GitLab

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control.

Affected products

• GitLab GitLab: from 11.0.0, before 11.3.13 (fixed in 11.3.13); from 11.4.0, before 11.4.11 (fixed in 11.4.11); from 11.5.0, before 11.5.4 (fixed in 11.5.4)

Published 2019-03-28. Last modified 2026-06-17.