← Back

CVE-2026-6515

nvd nist
Published: Apr 22, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.5
Source: cve@gitlab.com (Secondary)

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed a user to use invalidated or incorrectly scoped credentials to access Virtual Registries under certain conditions.

Affected (6)

Products: Gitlab: Gitlab
Gitlab
1 product
Gitlab
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Gitlab
Gitlab
From 18.10.0 to 18.10.4
Gitlab
From 18.2.0 to 18.9.6
Gitlab
From 18.10.0 to 18.10.4
Gitlab
From 18.2.0 to 18.9.6
Gitlab
Version 18.11.0
Gitlab
Version 18.11.0

Related CWEs

CWE-613
Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (2)

Source: cve@gitlab.com
Release NotesVendor Advisory
Source: cve@gitlab.com
Broken Link

Timeline

No history available yet.