An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. It was possible for authenticated users to access arbitrary compliance frameworks, leading to unauthorized data disclosure.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gitlab.com/gitlab-org/gitlab/-/issues/534960 | Exploit Issue Tracking |
Configurations
Configuration 1 (hide)
|
History
08 Aug 2025, 18:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gitlab:gitlab:18.0.0:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:18.0.0:*:*:*:community:*:*:* |
|
| References | () https://gitlab.com/gitlab-org/gitlab/-/issues/534960 - Exploit, Issue Tracking | |
| First Time |
Gitlab gitlab
Gitlab |
12 Jun 2025, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-12 11:15
Updated : 2025-08-08 18:21
NVD link : CVE-2025-5195
Mitre link : CVE-2025-5195
JSON object : View
Products Affected
gitlab
- gitlab
CWE
CWE-639
Authorization Bypass Through User-Controlled Key