Security Advisory

CVE-2026-6335

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-14 05:33:57
Last updated 2026-05-15 09:58:59
Assigner GitLab
CVSS score 5.4
State PUBLISHED

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.3 that under certain conditions could have allowed an authenticated user to execute arbitrary code in another user's browser session due to improper sanitization.