CVE-2025-11990 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user…
Low CVSS: 3.1

CVE-2025-11990

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.
Vendor
Gitlab
Product
Gitlab
CWE
CWE-177
Yayın Tarihi
2025-11-15 08:15:45
Güncelleme
2025-11-19 17:55:22
Source Identifier
cve@gitlab.com
KEV Date Added
-

Kategoriler

CWE-177 Gitlab LOW Gitlab 2025

Referanslar

https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/ https://gitlab.com/gitlab-org/gitlab/-/issues/577850 https://hackerone.com/reports/3257843