BIT-gitlab-2026-1747

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2026-1747.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-gitlab-2026-1747

Aliases

CVE-2026-1747

Published

2026-03-02T09:08:43.992Z

Modified

2026-03-02T09:27:53.929181Z

Summary

Authentication Bypass Using an Alternate Path or Channel in GitLab

Details

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packages.

Database specific

{
    "cpes": [
        "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*"
    ],
    "severity": "Medium"
}

References

Affected packages

Bitnami / gitlab

Package

Name: gitlab
Purl: pkg:bitnami/gitlab

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

17.11.0

Fixed

18.7.5

Introduced

18.8.0

Fixed

18.8.5

Introduced

18.9.0

Fixed

18.9.1

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2026-1747.json"