VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 12, 2025· Updated Jun 12, 2025

Insufficient Granularity of Access Control in GitLab

CVE-2025-5982

Description

An issue has been discovered in GitLab EE affecting all versions from 12.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. Under certain conditions users could bypass IP access restrictions and view sensitive information.

Affected products

3
  • GitLab Inc./GitLabv52 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 12.0
    • (no CPE)range: >=12.0, <17.10.8; >=17.11.0, <17.11.4; >=18.0.0, <18.0.2
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 12.0.0, < 18.0.2

Patches

Vulnerability mechanics

References

1

News mentions

1