CNNVD-202506-1690 Information

CNNVD ID

CNNVD-202506-1690

CVE-2025-5982

  • CNNVD Published: 2025-06-12

Description (Chinese)

GitLab Enterprise Edition(EE)是美国GitLab公司的一套内容管理系统。 GitLab Enterprise Edition 17.10.8之前版本、17.11.4之前版本和18.0.2之前版本存在安全漏洞,该漏洞源于用户可能绕过IP访问限制,可能导致查看敏感信息。

Description (English)

GitLab Enterprise Edition (EE) is a content management system for GitLab in the United States. There was a security loophole in previous versions of Gitlab Enterprise 17.10.8, 17.11.4 and 18.0.2, which stemmed from the possibility that users could circumvent IP access restrictions and could lead to access to sensitive information.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

GitLab

Published

2025-06-12

Last Modified

2026-02-24

References

https://gitlab.com/gitlab-org/gitlab/-/issues/514456 https://access.redhat.com/security/cve/cve-2025-5982 https://nvd.nist.gov/vuln/detail/CVE-2025-5982

Patch

https://about.gitlab.com/

Share on: