Beveiligingsadvies

CVE-2026-88880

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-10 13:05:31

Laatst bijgewerkt 2026-09-10 13:05:31

Toegewezen door VulnCheck

CVSS-score 9.2

Status PUBLISHED

Beschrijving

Renovate before 44.11.3 fails to validate Link header destinations when following GitLab server pagination, allowing malicious servers to redirect credential-bearing requests. Attackers controlling a compromised GitLab server can specify a Link header pointing to attacker-controlled infrastructure to exfiltrate authentication credentials.

← Alle CVE's bekijken Bekijk op cve.org ↗