2 lines
3.4 KiB
JSON
2 lines
3.4 KiB
JSON
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"GitLab","repo":"git://git@gitlab.com:gitlab-org/gitlab.git","vendor":"GitLab","versions":[{"lessThan":"19.0.5","status":"affected","version":"18.4","versionType":"semver"},{"lessThan":"19.1.3","status":"affected","version":"19.1","versionType":"semver"},{"lessThan":"19.2.1","status":"affected","version":"19.2","versionType":"semver"}]}],"source":"cve@gitlab.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","matchCriteriaId":"D8DD6476-EBB8-4D49-B0E8-F117D259F922","versionEndExcluding":"19.0.5","versionStartIncluding":"18.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"12BEEBC3-B865-494E-A7DD-91BB3ADF56F5","versionEndExcluding":"19.0.5","versionStartIncluding":"18.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","matchCriteriaId":"A63CCF5E-7A62-47E0-8949-269E2487CC82","versionEndExcluding":"19.1.3","versionStartIncluding":"19.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"02C7C8D4-9DFC-42F5-9E73-C2E81B2A7C3C","versionEndExcluding":"19.1.3","versionStartIncluding":"19.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:19.2.0:*:*:*:community:*:*:*","matchCriteriaId":"CB23328F-6D4D-4FBE-8AF1-11AE68F7F824","vulnerable":true},{"criteria":"cpe:2.3:a:gitlab:gitlab:19.2.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"2BA0ECDA-CCC7-41A9-8FFD-3557AE49F9B2","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with guest-role permissions to access test report contents they were not authorized to view due to improper access control enforcement."}],"id":"CVE-2026-4672","lastModified":"2026-08-03T14:03:16.267","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"cve@gitlab.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-4672","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-07-29T19:35:42.457995Z","version":"2.0.3"}}]},"published":"2026-07-29T20:17:03.963","references":[{"source":"cve@gitlab.com","tags":["Release Notes","Vendor Advisory"],"url":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-1-released/"},{"source":"cve@gitlab.com","tags":["Broken Link"],"url":"https://gitlab.com/gitlab-org/gitlab/-/work_items/594528"},{"source":"cve@gitlab.com","tags":["Permissions Required"],"url":"https://hackerone.com/reports/3617676"}],"sourceIdentifier":"cve@gitlab.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"cve@gitlab.com","type":"Primary"}]}
|