PT-2025-39626

CVE-2025-5069

·

Published

2025-09-25

·

Updated

2026-10-19

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:L/Au:S/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.10 through 18.2.6 GitLab CE/EE versions 18.3 through 18.3.2 GitLab CE/EE versions 18.4 through 18.4.0
Description An issue exists in GitLab CE/EE that could allow an authenticated user to gain unauthorized access to confidential issues. This is possible by creating a project with an identical name to a victim's project.
Recommendations Update GitLab CE/EE to version 18.2.7 or later. Update GitLab CE/EE to version 18.3.3 or later. Update GitLab CE/EE to version 18.4.1 or later.
Exploitability
Exploit
Fix
Vendors
Affected products
Related identifiers
BIT-GITLAB-2025-5069
Found an issue in the description? Have something to add? Feel free to write us 👾