CNNVD-202510-3760 Information
CNNVD ID
CNNVD-202510-3760
Related CVE
- CNNVD Published: 2025-10-27
Description (Chinese)
GitLab Enterprise Edition（EE）是美国GitLab公司的一套内容管理系统。 GitLab Enterprise Edition 18.4版本至18.4.3之前版本和18.5版本至18.5.1之前版本存在安全漏洞，该漏洞源于访问请求批准工作流程存在缺陷，可能导致经过身份验证的用户获得未经授权的项目访问权限。
Description (English)
GitLab Enterprise Edition (EE) is a content management system for GitLab in the United States. There is a security loophole between GitLab Enterprise 18.4 and 18.4.3 and between 18.5 and 18.5.1 resulting from deficiencies in the process of accessing requests for approval, which may lead to unauthorized project access for identity-certified users.
Hazard Level
Critical
Vulnerability Type
其他
Affected Vendor
GitLab
Published
2025-10-27
Last Modified
2026-02-24
References
https://about.gitlab.com/releases/2025/10/22/patch-release-gitlab-18-5-1-released/ https://gitlab.com/gitlab-org/gitlab/-/issues/551267 https://hackerone.com/reports/3209641 https://access.redhat.com/security/cve/cve-2025-6601