BIT-gitlab-2026-3074

vendorUSosv

Authorization Bypass Through User-Controlled Key in GitLab

Advisory ansehen veröffentlicht 2026-05-18Lizenz: per source

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to download private debugging symbols from inaccessible projects due to improper access control.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-3074US	—	0.20% (10th)	—	2026-05-14
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthentic…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

https://about.gitlab.com/releases/2026/05/13/patch-release-gitlab-18-11-3-released/ARTICLE
https://gitlab.com/gitlab-org/gitlab/-/work_items/591229WEB
https://hackerone.com/reports/3556163WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-3074WEB

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan