CyberRota
Back to database

CVE-2026-2900

LOW · CVSS 2.7 EPSS 0.01%

Source: NVD + CISA KEV + EPSS · Published: 2026-05-14 · Last synced: 2026-06-09

CyberRota Analysis

Saldırganın giriş yapmış olması gerekebilir.

CVE
CVE-2026-2900
Severity
LOW
CVSS
2.7
EPSS
0.01%
GitLab

Original NVD Description

GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that when instance-level approval rule editing prevention was enabled, could have allowed an authenticated user with Maintainer permissions to modify or delete project approval rules due to missing authorization checks.