GitLab
0 remedies
cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*, +2 more
0 remedies
- >= 15.2, < 16.9.7
- >= 16.10, < 16.10.5
- >= 16.11, < 16.11.2
GitLab EE API Bypass Vulnerability for Issue Update Disclosures to Banned Group Members
Vulnerability
A vulnerability exists in GitLab EE versions 15.2 prior to 16.9.7, 16.10 prior to 16.10.5, and 16.11 prior to 16.11.2. This issue allows banned group members to access updates on issues through the API, circumventing their restricted status.
Impact
Exploitation of this vulnerability could lead to unauthorized disclosure of issue updates to banned group members via the API.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
7.3impact
2.5exploitability
5.2remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.