PT-2026-7519 · Gitlab · Gitlab Ce/Ee

Publicado 2026-02-11 · Atualizado 2026-02-11 · CVE-2025-12575

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.0 through 18.6.5 GitLab EE versions 18.7 through 18.7.3 GitLab EE versions 18.8 through 18.8.3

Description GitLab EE is affected by an issue that, under specific conditions, could allow an authenticated user with certain permissions to make unauthorized requests to internal network services through the GitLab server.

Recommendations Update GitLab EE to version 18.6.6 or later. Update GitLab EE to version 18.7.4 or later. Update GitLab EE to version 18.8.4 or later.

Exploit

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2025-12575

Produtos afetados

Gitlab Ce/Ee

Referências · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/12xxx/CVE-2025-12575.json · Exploit
• 🔥 https://hackerone.com/reports/3397752 · Exploit
• https://twitter.com/CVEnew/status/2021554571420528733 · Publicação no Twitter
• https://cve.org/CVERecord?id=CVE-2025-12575 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2025-12575 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-12575 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-12575 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2021603363863802039 · Publicação no Twitter
• https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-12575 · Aviso do Fabricante
• https://gitlab.com/gitlab-org/gitlab/-/issues/579171 · Nota