BIT-GITLAB-2025-2498 Insufficient Granularity of Access Control in GitLab

An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions...

CVE-2025-2498

CVE-2025-2498 concerns GitLab EE with an improper access control that could allow users to view assigned issues from restricted groups by bypassing IP restrictions. Affected versions are GitLab EE 12.0 through prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2. The connected document...