CVE-2026-6352

2.7 Faible

Publiée le 08/07/2026 à 23:16 · Modifiée le 09/07/2026 à 22:36 · Analysée par le NVD · Source : cve@gitlab.com

Description

GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with auditor-level access to modify compliance violation records due to improper authorization on certain GraphQL operations.

Traduire en français

Produits concernés

GitLab
Gitlab gitlab

Scores CVSS

Version	Score	Source	Vecteur
3.1	2.7 Faible	cve@gitlab.com	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-863

Références

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-1-2-released/ Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/work_items/596789 Broken Link
https://hackerone.com/reports/3631344 Permissions Required

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories