CVEvulnerability
CVE-2026-6336
5.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-07-29
- Last modified
- 2026-08-03
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-863
Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthorized user to view project import source information due to a missing authorization check.
Affected configurations
• gitlab gitlab (>= 16.6.0 < 19.0.5)
• gitlab gitlab (>= 19.1.0 < 19.1.3)
• gitlab gitlab 19.2.0
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-1-released/ Release Notes, Vendor Advisory
- https://gitlab.com/gitlab-org/gitlab/-/work_items/596762 Broken Link
- https://hackerone.com/reports/3661988 Permissions Required