CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects GitLab.
CVE
CVE-2026-11379
Severity
MEDIUM
CVSS
5.3
EPSS
0.19%
GitLab
Original NVD Description
GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 prior to 18.11.6, 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1 in which incorrect authorization in DAST site profile management could allow a user with Developer role to exfiltrate DAST site profile secrets under certain conditions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)