Поиск уязвимостей
Количество 4
Количество 4
CVE-2026-14210
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a project-scoped fine-grained Personal Access Token to permanently delete or modify group-level labels, due to incorrect authorization logic on label ownership scope validation.
CVE-2026-14210
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a project-scoped fine-grained Personal Access Token to permanently delete or modify group-level labels, due to incorrect authorization logic on label ownership scope validation.
GHSA-hx4m-w847-w5h9
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a project-scoped fine-grained Personal Access Token to permanently delete or modify group-level labels, due to incorrect authorization logic on label ownership scope validation.
BDU:2026-16756
Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/ CE, связанная с недостатками механизма разграничения доступа, позволяющая нарушителю получить доступ на изменение и удаление произвольных данных
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-14210 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a project-scoped fine-grained Personal Access Token to permanently delete or modify group-level labels, due to incorrect authorization logic on label ownership scope validation. | CVSS3: 4.3 | 0% Низкий | 27 дней назад |
 | CVE-2026-14210 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a project-scoped fine-grained Personal Access Token to permanently delete or modify group-level labels, due to incorrect authorization logic on label ownership scope validation. | CVSS3: 4.3 | 0% Низкий | 27 дней назад |
| GHSA-hx4m-w847-w5h9 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with a project-scoped fine-grained Personal Access Token to permanently delete or modify group-level labels, due to incorrect authorization logic on label ownership scope validation. | CVSS3: 4.3 | 0% Низкий | 26 дней назад |
 | BDU:2026-16756 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/ CE, связанная с недостатками механизма разграничения доступа, позволяющая нарушителю получить доступ на изменение и удаление произвольных данных | CVSS3: 4.3 | 0% Низкий | 28 дней назад |
Уязвимостей на страницу