Non évaluée

Incorrect Authorization in GitLab

CVE-2025-6168 Première détection SecPulse Jul 10, 2025

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated maintainers to bypass group-level user invitation restrictions by sending crafted API requests.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com
report hackerone.com

Faits clés

Gravité: Non évaluée
Publication: Jul 10, 2025
Première détection SecPulse: Jul 10, 2025
CWE: CWE-863

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:11