CVE-2025-5982

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-5982
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5982.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-5982
Aliases
Published
2025-06-12T16:27:56Z
Modified
2026-09-11T03:48:19Z
Severity
  • 3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Insufficient Granularity of Access Control in GitLab
Details

An issue has been discovered in GitLab EE affecting all versions from 12.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. Under certain conditions users could bypass IP access restrictions and view sensitive information.

Database specific 
{
    "cna_assigner": "GitLab",
    "cwe_ids": [
        "CWE-1220"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5982.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
3b13818e8330f68625d80d9bf5d8049c41fbe197
Fixed
66f725cc002c2eee98e0cfee8521025dd7a4eb6e
Introduced
b7c061ce59a5eca5c5764fcf61be8a5103fb7d55
Fixed
eb2929592bc8e3c7b766d886766a098f10b33eb1
Introduced
504fd9e5236e13d674e051c6b8a1e9892b371c58
Fixed
073fca15cf94474af5984eda431aefd84307ec03
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "12.0"
        },
        {
            "fixed": "17.10.8"
        },
        {
            "introduced": "17.11"
        },
        {
            "fixed": "17.11.4"
        },
        {
            "introduced": "18.0"
        },
        {
            "fixed": "18.0.2"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

v17.*
v17.11.0-ee
v18.*
v18.0.0-ee

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5982.json"