Medium (5.3) in gitlab gitlab. EPSS 2.1% chance of exploitation in the next 30 days.
Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue.
Severity
CVSS 3.1
5.3 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
2.1% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)