Security Advisory
CVE-2019-5474
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions.