CVE-2026-7471

תיאור (מקור, אנגלית)

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with control of a virtual registry upstream to make requests to internal hosts due to improper validation.

מדדים

CVSS 3.1

3.5 (LOW) מקור הציון: CNA CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-4/8/2026

CWE

CWE-918

מוצרים מושפעים

gitlab: gitlab

קישורים

• https://about.gitlab.com/releases/2026/05/13/patch-release-gitlab-18-11-3-rele‮… Release Notes
• https://gitlab.com/gitlab-org/gitlab/-/work_items/594196 Broken Link