Threats tagged 'bit-gitlab-2026-2370'

An authorization flaw in GitLab CE/EE versions from 14.3 up to but not including 18.8.7, 18.9 up to 18.9.3, and 18.10 up to 18.10.1 affects Jira Connect installations. This flaw allows an authenticated user with minimal workspace permissions to obtain installation credentials and impersonate the GitLab application. The issue has been remediated in the specified fixed versions.