CVE-2018-19580

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-19580
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-19580.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-19580
Downstream
CGA (4)
UBUNTU (1)
Published
2019-07-10T17:15:11Z
Modified
2026-10-16T10:46:25Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
97bf583178874e2617c347c33ca30b9b33b97402
Introduced
b19996a7f4983589abe5a72e10dcb823b5d4f374
Fixed
966cce5bfe657c7676dcc02125bb89bd3f067887
Introduced
985cc000d4aec779e6c08509508974ffa9c8c58b
Fixed
cab68f5d2035026e5e29ef68b79fdfe5ca90f947
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "11.3.11"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "11.3.11"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range":  [
                {
                    "introduced":  "11.3.12"
                },
                {
                    "fixed":  "11.4.8"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range":  [
                {
                    "introduced":  "11.3.12"
                },
                {
                    "fixed":  "11.4.8"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range":  [
                {
                    "introduced":  "11.4.9"
                },
                {
                    "fixed":  "11.5.1"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range":  [
                {
                    "introduced":  "11.4.9"
                },
                {
                    "fixed":  "11.5.1"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Affected versions

v1.*
v1.2.0
v1.2.0pre
v1.2.1
v1.2.2
v11.*
v11.3.0-ee
v11.3.0-rc1-ee
v11.3.0-rc10-ee
v11.3.0-rc11-ee
v11.3.0-rc2-ee
v11.3.0-rc3-ee
v11.3.0-rc4-ee
v11.3.0-rc5-ee
v11.3.0-rc6-ee
v11.3.0-rc7-ee
v11.3.0-rc8-ee
v11.3.0-rc9-ee
v11.4.0-rc1-ee
v11.4.0-rc2-ee
v11.4.0-rc3-ee
v11.5.0-ee
v11.5.0-rc1-ee
v11.5.0-rc10-ee
v11.5.0-rc11-ee
v11.5.0-rc12-ee
v11.5.0-rc13-ee
v11.5.0-rc2-ee
v11.5.0-rc3-ee
v11.5.0-rc4-ee
v11.5.0-rc5-ee
v11.5.0-rc6-ee
v11.5.0-rc7-ee
v11.5.0-rc8-ee
v11.5.0-rc9-ee
v2.*
v2.3.0
v2.3.0pre
v2.3.1
v2.4.0
v2.4.0pre
v2.4.1
v2.5.0
v2.6.0
v2.6.0pre
v2.6.1
v2.6.2
v2.6.3
v2.7.0
v2.7.0pre
v2.8.0
v2.8.0pre
v2.8.1
v2.8.2
v2.9.0
v2.9.1
v3.*
v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.1.0
v4.*
v4.0.0
v4.0.0rc1
v4.0.0rc2
v5.*
v5.0.0
v5.1.0
v5.2.0
v6.*
v6.0.0-ee
v6.0.0-ee.beta
v6.0.0-ee.rc1
v6.1.0-ee
v6.3.0-ee
v6.3.1-ee
v6.4.0-ee
v6.5.0-ee
v6.6.0-ee
v6.7.0-ee
v6.7.0.rc1-ee
v6.8.0-ee
v7.*
v7.0.0-ee
v7.1.0-ee
v7.1.0.rc1-ee
v7.2.0.rc1-ee
v7.2.0.rc2-ee
v7.2.0.rc3-ee
v7.2.0.rc4-ee
v7.2.0.rc5-ee
v7.3.0-ee
v7.3.0.rc1-ee

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-19580.json"