CVE-2026-105777
Qualys 위협 인텔 · 심각도 3/5 · QID 533078 · Web Application
공개 익스플로잇
쉬운 악용
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthenticated user could have retrieved sensitive internal server credentials due to improper filtering of internal response headers.
타임라인
- NVD 공개
- 첫 보도 보안뉴스 · “로그인 없이 개발 서버 뚫린다” 깃랩, CVSS 10점 치명적 결함 …
벡터: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N