BIT-gitlab-2026-11379

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2026-11379.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-gitlab-2026-11379

Aliases

CVE-2026-11379

Published

2026-06-29T06:00:55.333Z

Modified

2026-06-29T08:15:05.940175723Z

Summary

Incorrect Authorization in GitLab

Details

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under certain conditions.

Database specific

{
    "cpes": [
        "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*"
    ],
    "severity": "Medium"
}

References

Affected packages

Bitnami / gitlab

Package

Name: gitlab
Purl: pkg:bitnami/gitlab

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

13.11.0

Fixed

18.11.6

Introduced

19.0.0

Fixed

19.0.3

Introduced

19.1.0

Fixed

19.1.1

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2026-11379.json"