Modestia

**Name of the Vulnerable Software and Affected Versions** GitLab EE versions 13.11 through 18.11.5 GitLab EE versions 19.0 through 19.0.2 GitLab EE versions 19.1 **Description** Incorrect authorization in DAST (Dynamic Application Security Testing) site profile management allows a user with the Developer role to exfiltrate DAST site profile secrets under certain conditions. **Recommendations** Update GitLab EE versions 13.11 through 18.11.5 to 18.11.6. Update GitLab EE versions 19.0 through 19.0.2 to 19.0.3. Update GitLab EE version 19.1 to 19.1.1.

**Name of the Vulnerable Software and Affected Versions** GitLab EE versions 18.6 through 18.11.5 GitLab EE versions 19.0 through 19.0.2 GitLab EE versions 19.1 through 19.1.0 **Description** Insufficient authorization checks could allow an authenticated user with limited permissions to access project information under certain conditions. **Recommendations** Update to version 18.11.6 Update to version 19.0.3 Update to version 19.1.1