[CVE-2026-12053] GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that unde…

Descripción técnica

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions could have allowed a user to access sensitive information that had already been committed to a project, due to insufficient output filtering in Duo Workflows.

Puntuación CVSS

Score: 8.6/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Productos afectados

Gitlab — Gitlab

Debilidades (CWE)

CWE-532

Fuente oficial

Publicado en NIST NVD.