Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2026-6896

CVSS 3.1
5.4 medium
EPSS
<1%p34
Published
·
Modified
Analyze CVE-2026-6896 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary scripts in another user's browser session due to improper sanitization of user-supplied input.

Vendors
gitlab
Products
gitlab
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

1 story