CNNVD-202511-2846 Information
CNNVD ID
CNNVD-202511-2846
Related CVE
- CNNVD Published: 2025-11-26
Description (Chinese)
GitLab Enterprise Edition（EE）和GitLab Community Edition（CE）都是美国GitLab公司的产品。GitLab Enterprise Edition是一套内容管理系统。GitLab Community Edition是一种社区版 GitLab 。 GitLab CE/EE 13.2版本至18.4.5之前版本、18.5版本至18.5.3之前版本和18.6版本至18.6.1之前版本存在日志信息泄露漏洞，该漏洞源于已验证用户可能获取敏感令牌。
Description (English)
GitLab Enterprise Edition (EE) and GitLab Community Edition (CE) are products of the United States company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. GitLab CE/EE 13.2 to pre 18.4.5, pre 18.5 to pre 18.5.3 and pre 18.6 to pre 18.6.1 have log information leaks, which stem from the possibility that certified users may acquire sensitive tokens.
Hazard Level
Critical
Vulnerability Type
日志信息泄露
Affected Vendor
GitLab
Published
2025-11-26
Last Modified
2026-02-24
References
https://gitlab.com/gitlab-org/gitlab/-/issues/545947 https://vigilance.fr/vulnerability/GitLab-CE-EE-multiple-vulnerabilities-dated-26-11-2025-48877 https://access.redhat.com/security/cve/cve-2025-13611
Patch
https://packages.gitlab.com/gitlab/gitlab-ee
Share on: