Mcp Gitlab
Approved changes feed: RSS · Atom
cpe:2.3:a:zereight:mcp-gitlab:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Zereight (ab1d3198-44cb-5e87-ad2e-e44546711c93) |
|---|---|
| Product | Mcp Gitlab (75eba2bb-2e62-5b2f-bd75-37ddf2d5bd0c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-61462 |
vulnerable | 2026-07-29 01:06:18.865381 |
mcp-gitlab Path Traversal via job_id Parameter
HIGH (8.6)
mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted job_id values like ../../../user to escape the intended path prefix and access arbitrary GitLab API resources using the operator's personal access token.
Published: 2026-07-13T17:17:26.026Z
Updated: 2026-10-08T15:23:36.877Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.