2 lines
3.3 KiB
JSON
2 lines
3.3 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"GitLab","repo":"git://git@gitlab.com:gitlab-org/gitlab.git","vendor":"GitLab","versions":[{"lessThan":"18.8.9","status":"affected","version":"18.0.0","versionType":"semver"},{"lessThan":"18.9.5","status":"affected","version":"18.9","versionType":"semver"},{"lessThan":"18.10.3","status":"affected","version":"18.10","versionType":"semver"}]}],"source":"cve@gitlab.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"E44C8A18-7C71-4626-85E4-9753A7039A03","versionEndExcluding":"18.8.9","versionStartIncluding":"18.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"3BA6A89D-D2C1-45B9-A8E8-64256816D880","versionEndExcluding":"18.9.5","versionStartIncluding":"18.9.0","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"BB2F3665-2451-4A4D-8538-93F540975F0E","versionEndExcluding":"18.10.3","versionStartIncluding":"18.10.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP addresses of users viewing the report via specially crafted content."},{"lang":"es","value":"GitLab ha remediado un problema en GitLab EE que afectaba a todas las versiones desde la 18.0.0 anteriores a la 18.8.9, la 18.9 anteriores a la 18.9.5, y la 18.10 anteriores a la 18.10.3 que en los informes de Calidad de Código podría haber permitido a un usuario autenticado filtrar direcciones IP de usuarios que visualizaban el informe a través de contenido especialmente diseñado."}],"id":"CVE-2026-1516","lastModified":"2026-07-25T11:10:00.100","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.1,"impactScore":3.6,"source":"cve@gitlab.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-1516","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-04-09T15:42:16.466494Z","version":"2.0.3"}}]},"published":"2026-04-08T23:16:57.920","references":[{"source":"cve@gitlab.com","tags":["Release Notes","Vendor Advisory"],"url":"https://about.gitlab.com/releases/2026/04/08/patch-release-gitlab-18-10-3-released/"},{"source":"cve@gitlab.com","tags":["Broken Link"],"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/587893"},{"source":"cve@gitlab.com","tags":["Permissions Required"],"url":"https://hackerone.com/reports/3514461"}],"sourceIdentifier":"cve@gitlab.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"cve@gitlab.com","type":"Secondary"}]}
|