CVE-2018-18645 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Low
Remote	Yes
Type	Information disclosure
Description	A security issue has been found in gitlab versions prior to 11.4.3, where when replying to an issue through email, with the GitLab email footer included, a user's unsubscribe link would be included in the issue. This information is considered sensitive.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-794	gitlab	11.4.0-1	11.4.3-1	Critical	Fixed

Date	Advisory	Group	Package	Severity	Type
31 Oct 2018	ASA-201810-16	AVG-794	gitlab	Critical	multiple issues

References
https://about.gitlab.com/2018/10/29/security-release-gitlab-11-dot-4-dot-3-released/ https://gitlab.com/gitlab-org/gitlab-ce/commit/82c12bd8bf9e0ea9e8df3bbcad91c27fccc709e8