VYPR
← All advisories
Medium severity5.0NVD Advisory· Published Aug 13, 2025· Updated Jun 17, 2026

CVE-2025-5819

CVE-2025-5819

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • GitLab Inc./GitLabv53 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 15.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=15.7.0,<17.11.6
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=15.7.0,<17.11.6
  • GitLab Inc./GitLab EE and CEllm-fuzzy
    Range: from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 15.7.0, < 18.0.6

Patches

Vulnerability mechanics

References

2

News mentions

1