CVEvulnerability
CVE-2025-6195
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-11-26
- Last modified
- 2026-10-18
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-425
Description
GitLab has remediated an issue in GitLab EE affecting all versions from 13.7 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an authenticated user to view information from security reports under certain configuration conditions.
Affected configurations
• gitlab gitlab (>= 13.7.0 < 18.4.5)
• gitlab gitlab (>= 18.5.0 < 18.5.3)
• gitlab gitlab 18.6.0
Related
Weakness · CWE (1)
- CWE-425 Direct Request weakness
References
- https://about.gitlab.com/releases/2025/11/26/patch-release-gitlab-18-6-1-released/ about.gitlab.com
- https://gitlab.com/gitlab-org/gitlab/-/issues/549937 Broken Link
- https://hackerone.com/reports/3155693 Permissions Required