CVE-2026-84284: Gitlab: hatalı yetkilendirme

Açıklama (NVD)

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read work item contents from private groups and projects due to incorrect authorization checks.

Özet bilgiler

Ürün

Gitlab Gitlab

CVSS v3.1

5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

%0,26 (yüzdelik 18)

CWE

CWE-863

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• docs.gitlab.com
• gitlab.com
• hackerone.com
• CWE-863