Lucene search
K

79 matches found

OSV
OSV
added 2026/04/24 9:11 a.m.2 views

BIT-GITLAB-2026-5377 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confidential or private issues in public projects due to improper access control in the issue description rendering process...

4.3CVSS5.4AI score0.00017EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/22 6:31 p.m.0 views

EUVD-2026-25044

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confidential or private issues in public projects due to improper access control in the issue description rendering process...

4.3CVSS5.8AI score0.00017EPSS
Exploits0References4
NVD
NVD
added 2026/04/22 5:16 p.m.1 views

CVE-2026-5377

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confidential or private issues in public projects due to improper access control in the issue description rendering process...

4.3CVSS0.00017EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/22 4:4 p.m.0 views

CVE-2026-5377

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confidential or private issues in public projects due to improper access control in the issue description rendering process...

4.3CVSS5.8AI score0.00017EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/22 4:4 p.m.1 views

CVE-2026-5377 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confidential or private issues in public projects due to improper access control in the issue description rendering process...

4.3CVSS5.8AI score0.00017EPSS
Exploits0References3
CVE
CVE
added 2026/04/22 4:4 p.m.32 views

CVE-2026-5377

Summary: CVE-2026-5377 affects GitLab CE/EE prior to 18.11.1. The vulnerability arises from improper access control in the issue description rendering process, which could allow an authenticated user to view titles of confidential or private issues in public projects. Affected versions: GitLab 18...

4.3CVSS5.8AI score0.00017EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.4 views

GitLab 18.11 < 18.11.1 (CVE-2026-5377)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confidential or private issues in publ...

4.3CVSS5.6AI score0.00017EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/03/26 3:10 p.m.1 views

CVE-2026-1732

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to disclose confidential issue titles due to improper filtering under certain circumstances...

4.3CVSS5.8AI score0.00028EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:10 p.m.1 views

CVE-2026-1182

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to gain unauthorized access to confidential issue title created in public projects under certain circumstances...

4.3CVSS5.8AI score0.00036EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-1732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowe...

4.3CVSS5.9AI score0.00028EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-1182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowe...

4.3CVSS5.9AI score0.00036EPSS
Exploits0References2
OSV
OSV
added 2026/03/14 9:9 a.m.1 views

BIT-GITLAB-2026-1182 Improper Removal of Sensitive Information Before Storage or Transfer in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to gain unauthorized access to confidential issue title created in public projects under certain circumstances...

4.3CVSS5.8AI score0.00036EPSS
Exploits0References3
OSV
OSV
added 2026/03/13 9:35 a.m.2 views

BIT-GITLAB-2026-1732 Improper Removal of Sensitive Information Before Storage or Transfer in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to disclose confidential issue titles due to improper filtering under certain circumstances...

4.3CVSS5.8AI score0.00028EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/03/12 1:33 a.m.0 views

CVE-2026-1182 Improper Removal of Sensitive Information Before Storage or Transfer in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to gain unauthorized access to confidential issue title created in public projects under certain circumstances...

4.3CVSS5.8AI score0.00036EPSS
Exploits0References2
CVE
CVE
added 2026/03/12 1:33 a.m.51 views

CVE-2026-1182

GitLab CE/EE patched CVE-2026-1182 affecting all versions: 8.14–18.7.6, 18.8–18.8.6, and 18.9–18.9.2. An authenticated user could gain unauthorized access to confidential issue titles in public projects under certain circumstances. The remediation addresses these releases; the advisory does not p...

4.3CVSS5.8AI score0.00036EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/03/12 1:33 a.m.3 views

CVE-2026-1182

Removed by vendor...

4.3CVSS5.8AI score0.00036EPSS
Exploits0
OSV
OSV
added 2026/03/12 1:33 a.m.1 views

CVE-2026-1182 Improper Removal of Sensitive Information Before Storage or Transfer in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to gain unauthorized access to confidential issue title created in public projects under certain circumstances...

4.3CVSS5.9AI score0.00036EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/03/12 12:0 a.m.2 views

PT-2026-24905

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.14 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to gain unauthorized access to confidential issue title created in public projects under certain circumstances...

4.3CVSS5.8AI score0.00036EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/03/12 12:0 a.m.2 views

GitLab Enterprise Edition(EE)和GitLab Community Edition(CE) 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. There were security vulnerabilities in versions prior to 18.7.6, 18.8.6, a...

4.3CVSS5.8AI score0.00036EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/11 6:30 p.m.1 views

EUVD-2026-11188

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to disclose confidential issue titles due to improper filtering under certain circumstances...

4.3CVSS5.7AI score0.00028EPSS
Exploits0References4
Rows per page
Query Builder