PT-2026-71214 · Gitlab · Gitlab Ce/Ee
CVE-2026-15216
·
Published
2026-08-12
·
Updated
2026-08-18
CVSS v3.1
8.7
High
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 18.2 through 19.0.5
GitLab CE/EE versions 19.1 through 19.1.3
GitLab CE/EE versions 19.2 through 19.2.1
Description
An issue exists where improper neutralization of user-controlled data rendered in pagination controls by an analytics dashboard component could allow cross-site scripting (XSS), a technique where malicious scripts are injected into trusted websites.
Recommendations
Update GitLab CE/EE versions 18.2 through 19.0.5 to version 19.0.6.
Update GitLab CE/EE versions 19.1 through 19.1.3 to version 19.1.4.
Update GitLab CE/EE versions 19.2 through 19.2.1 to version 19.2.2.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gitlab Ce/Ee