CVE-2025-3396

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-3396
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3396.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-3396
Aliases
Published
2025-07-10T08:31:04.703Z
Modified
2026-04-10T05:25:25.862396Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Incorrect Authorization in GitLab
Details

An issue has been discovered in GitLab EE affecting all versions from 13.3 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that could have allowed authenticated project owners to bypass group-level forking restrictions by manipulating API requests.

Database specific 
{
    "cwe_ids": [
        "CWE-863"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/3xxx/CVE-2025-3396.json",
    "cna_assigner": "GitLab"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
4922d2720ace5802587b8324a77a41b373d08e69
Fixed
bfd493869858083febee3788e111b5503caf492c
Database specific 
{
    "versions": [
        {
            "introduced": "13.3"
        },
        {
            "fixed": "17.11.6"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
504fd9e5236e13d674e051c6b8a1e9892b371c58
Fixed
47fe1a97b4e6da353e1721a4c750b3fa0770d2e2
Database specific 
{
    "versions": [
        {
            "introduced": "18.0"
        },
        {
            "fixed": "18.0.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
e0f3b86408aa4e7f03b63ac9e7dba6de1df14e93
Fixed
cd9f1ac5ba97500e5e32be592fea3f81c9deb8d9
Database specific 
{
    "versions": [
        {
            "introduced": "18.1"
        },
        {
            "fixed": "18.1.2"
        }
    ]
}

Affected versions

v18.*
v18.0.0-ee
v18.1.0-ee

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3396.json"