Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 3

Количество 3

nvd логотип

CVE-2026-10086

около 1 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code in the context of another user's session, due to improper sanitization of user-supplied input.

CVSS3: 8.7
EPSS: Низкий
github логотип

GHSA-fc6w-qm7g-jfwh

около 1 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code in the context of another user's session, due to improper sanitization of user-supplied input.

CVSS3: 8.7
EPSS: Низкий
fstec логотип

BDU:2026-09071

около 1 месяца назад

Уязвимость панели аналитики программной платформы на базе git для совместной работы над кодом GitLab EE, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.7
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2026-10086

GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code in the context of another user's session, due to improper sanitization of user-supplied input.

CVSS3: 8.7
0%
Низкий
около 1 месяца назад
github логотип
GHSA-fc6w-qm7g-jfwh

GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code in the context of another user's session, due to improper sanitization of user-supplied input.

CVSS3: 8.7
0%
Низкий
около 1 месяца назад
fstec логотип
BDU:2026-09071

Уязвимость панели аналитики программной платформы на базе git для совместной работы над кодом GitLab EE, позволяющая нарушителю выполнить произвольный код

CVSS3: 8.7
0%
Низкий
около 1 месяца назад

Уязвимостей на страницу