PT-2026-7518 · Gitlab · Gitlab Ce/Ee
CVE-2025-12073
·
Publicado
2026-02-11
·
Atualizado
2026-02-16
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
GitLab CE/EE versions 18.0 through 18.6.5
GitLab CE/EE versions 18.7 through 18.7.3
GitLab CE/EE versions 18.8 through 18.8.3
Description
An authenticated user could potentially perform server-side request forgery against internal services by circumventing protections within the Git repository import functionality. This is possible under specific conditions.
Recommendations
Update GitLab CE/EE to version 18.6.6 or later.
Update GitLab CE/EE to version 18.7.4 or later.
Update GitLab CE/EE to version 18.8.4 or later.
Exploit
Correção
SSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gitlab Ce/Ee