VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jul 24, 2025· Updated Jun 17, 2026

CVE-2025-0765

CVE-2025-0765

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an unauthorized user to access custom service desk email addresses.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • GitLab Inc./GitLabv56 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 17.9
    • (no CPE)range: from 17.9 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=17.9.0,<18.0.5
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=17.9.0,<18.0.5
    • cpe:2.3:a:gitlab:gitlab:18.2:*:*:*:community:*:*:*
    • cpe:2.3:a:gitlab:gitlab:18.2:*:*:*:enterprise:*:*:*
  • GitLab Inc./GitLab EE and CEllm-fuzzy
    Range: from 17.9 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 17.9.0, < 18.0.5

Patches

Vulnerability mechanics

References

2

News mentions

1