BIT-GITLAB-2025-11990 Improper Handling of URL Encoding (Hex Encoding) in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses...

BIT-GITLAB-2025-11865 Incorrect Authorization in GitLab

An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain circumstances, could have allowed an attacker to remove Duo flows of another user...

Exploit for Code Injection in Gitlab

Vuln Impact An issue has been discovered in GitLab CE/EE af...

GitLab Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

GitLab Authentication Bypass Unauthorized Access

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

GitLab GraphQL API Unauthorized Access

The vulnerability of the GraphQL API interface of a software platform based on Git for collaborative code development on GitLab is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized acces...

GitLab Ruby Core DoS

The vulnerability of the Ruby Core library, a software platform based on Git for collaborative code development on GitLab, is related to unlimited resource distribution. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

GitLab Authentication Bypass

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

GitLab OAuth Protocol Unauthorized Access

The vulnerability of the OAuth protocol implementation in a software platform based on Git for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass security restrictions and gain...

GitLab GraphQL API DoS

The vulnerability of the GraphQL API interface of a software platform based on Git for collaborative code development on GitLab is related to unlimited resource distribution. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

GraphQL API Interface GitLab Access Bypass

The vulnerability of the GraphQL API interface of the Git-based software development platform for collaborative code editing on GitLab is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker to gain read, edit, or delete access to data...

GitLab Uncontrolled Memory Distribution DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

GitLab Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to clean up data at the management level. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

GitLab URL Encoding Unauthorized Access

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to improper handling of data with URL encoding. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Vulnerabilities fixed in GitLab

GitLab has fixed vulnerabilities in GitLab CE/EE versions for 18.3.6, 18.4.4, and 18.5.2. The vulnerabilities include the ability for attackers to remove Duo authentication flows, access sensitive information via GraphQL subscriptions, and bypass access controls on GitLab Pages. These...

Linux Distros Unpatched Vulnerability : CVE-2025-7000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 17.6 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that, under specific...

Linux Distros Unpatched Vulnerability : CVE-2025-11865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain...

Linux Distros Unpatched Vulnerability : CVE-2025-6945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed a...

Linux Distros Unpatched Vulnerability : CVE-2025-6171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowe...

Linux Distros Unpatched Vulnerability : CVE-2025-2615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that could have allow...