BIT-gitlab-2025-5982

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2025-5982.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-gitlab-2025-5982

Aliases

CVE-2025-5982

Published

2025-06-14T06:15:34.466Z

Modified

2025-06-14T06:28:42.995711Z

Summary

Insufficient Granularity of Access Control in GitLab

Details

An issue has been discovered in GitLab EE affecting all versions from 12.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. Under certain conditions users could bypass IP access restrictions and view sensitive information.

Database specific

{
    "cpes": [
        "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*"
    ],
    "severity": "Low"
}

References

https://gitlab.com/gitlab-org/gitlab/-/issues/514456
https://nvd.nist.gov/vuln/detail/CVE-2025-5982

Affected packages

Bitnami / gitlab

Package

Name: gitlab
Purl: pkg:bitnami/gitlab

Severity

3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

12.0.0

Fixed

18.0.2