CVE-2019-5474

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-284 CWE-863

Affected software

Vendor	Product	Versions
GitLab	GitLab EE	before 12.1.2; before 12.0.4; before 11.11.6

References

https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/Patch, Release Notes, Vendor Advisory
https://gitlab.com/gitlab-org/gitlab-ee/issues/11423Exploit, Vendor Advisory
https://hackerone.com/reports/544756Permissions Required
https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/Patch, Release Notes, Vendor Advisory
https://gitlab.com/gitlab-org/gitlab-ee/issues/11423Exploit, Vendor Advisory
https://hackerone.com/reports/544756Permissions Required

Timeline

Published: Jan 28, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-54758.8The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vuln CVE-2019-54769.8An SQL Injection in the Nextcloud Lookup-Server < v0.3.0 (running on https://lookup.nextcloud.com) caused unauthenticated users to be able t CVE-2019-54779.8A command injection vulnerability in Nokogiri v1.10.3 and earlier allows commands to be executed in a subprocess via Ruby's `Kernel.open` me CVE-2019-54785.5A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control CVE-2019-54797.5An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file).CVE-2019-54805.3A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders.CVE-2019-54819.8Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.CVE-2019-54829.8Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.CVE-2019-54835.3Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users.CVE-2019-54847.5Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attacke CVE-2019-548510.0NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the rep CVE-2019-54868.8A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that coul