CVE-2026-11379

5.3 Moyenne

Publiée le 25/06/2026 à 07:16 · Modifiée le 26/06/2026 à 20:34 · Analysée par le NVD · Source : cve@gitlab.com

Description

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under certain conditions.

Traduire en français

Produits concernés

GitLab
Gitlab gitlab

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	cve@gitlab.com	`CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-863

Références

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-1-1-released/ Release NotesVendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/work_items/517659 Broken Link

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories