Unrated

Insufficient Granularity of Access Control in GitLab

CVE-2025-5982 First seen on SecPulse Jun 13, 2025

Original description The description as published by the source.

An issue has been discovered in GitLab EE affecting all versions from 12.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. Under certain conditions users could bypass IP access restrictions and view sensitive information.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com

Key facts

Severity: Unrated
Published: Jun 13, 2025
First seen on SecPulse: Jun 13, 2025
CWE: CWE-1220

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:11