BIT-gitlab-2026-3553

vendorUSosv

Incorrect Authorization in GitLab

Advisory ansehen veröffentlicht 2026-06-13Lizenz: per source

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to access confidential issue details due to incorrect authorization checks.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-3553US	—OT erhöht	0.24% (14th)	—	2026-06-11
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could hav…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

https://about.gitlab.com/releases/2026/06/10/patch-release-gitlab-19-0-2-released/ARTICLE
https://gitlab.com/gitlab-org/gitlab/-/work_items/592295REPORT
https://hackerone.com/reports/3578216WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-3553WEB

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan