CVE-2025-4976

CVE-2025-4976 affects GitLab EE. Affected: all versions from 17.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1. Under certain circumstances, an attacker could access internal notes in GitLab Duo responses. Root cause details are not fully disclosed in the provided documents, but reme...

CVE-2025-4976

Removed by vendor...

GitLab 17.0 < 18.0.5 / 18.1 < 18.1.3 / 18.2 < 18.2.1 (CVE-2025-4976)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Exposure of Sensitive Information Due to Incompatible Policies in GitLab CVE-2025-4976 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...