Security Advisory

CVE-2026-7492

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-08 20:46:33

Last updated 2026-07-09 14:14:15

Assigner GitLab

CVSS score 4.3

State PUBLISHED

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.1 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an unauthenticated user to determine the existence of a private project due to improper authorization controls on cross-project reference pages.

← Browse all CVEs View on cve.org ↗