CVE-2026-3855 | BDVDB-2026-374665 Detail
GitLabGitLab
Description#
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with project-level permissions to access restricted file contents on the server or cause denial of service due to improper validation of parameters in the Terraform state upload functionality.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-99 Improper Control of Resource Identifiers ('Resource Injection')
References#
Exploit#
History#
- Version 1Record published in the CVE List.