CVE-2025-5982

An issue has been discovered in GitLab EE affecting all versions from 12.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. Under certain conditions users could bypass IP access restrictions and view sensitive information.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

History

12 Aug 2025, 13:07

Type Values Removed Values Added
CPE cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
First Time Gitlab gitlab
Gitlab
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
References () https://gitlab.com/gitlab-org/gitlab/-/issues/514456 - () https://gitlab.com/gitlab-org/gitlab/-/issues/514456 - Broken Link
CWE NVD-CWE-noinfo

12 Jun 2025, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-12 17:15

Updated : 2025-08-12 13:07


NVD link : CVE-2025-5982

Mitre link : CVE-2025-5982


JSON object : View

Products Affected

gitlab

  • gitlab
CWE
CWE-1220

Insufficient Granularity of Access Control

NVD-CWE-noinfo