CVE-2026-100104 | BDVDB-2026-388111 Detail

Description#

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a time-of-check to time-of-use race condition in URL validation during repository import operations.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-10-13Record published in the CVE List.
2. Version 22026-10-14Most recent update recorded in the CVE List.