vulnerability

Gitlab Gitlab: CVE-2019-11546: Concurrent Execution using Shared Resource with Improper Synchronization

Severity
3
CVSS
(AV:N/AC:M/Au:S/C:N/I:P/A:N)
Published
Sep 9, 2019
Added
Sep 18, 2025
Modified
Sep 18, 2025

Description

An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has a Race Condition which could allow users to approve a merge request multiple times and potentially reach the approval count required to merge.

Solution

gitlab-gitlab-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.