Gitlab · Gitlab Ce/Ee · CVE-2025-2408
Name of the Vulnerable Software and Affected Versions:
GitLab CE/EE versions 13.12 through 17.8.6
GitLab CE/EE versions 17.9 through 17.9.5
GitLab CE/EE versions 17.10 through 17.10.3
Description:
An issue has been discovered affecting GitLab CE/EE, where under certain conditions, users could bypass IP access restrictions and view sensitive information.
Recommendations:
For versions 13.12 through 17.8.6, update to version 17.8.7 or later.
For versions 17.9 through 17.9.5, update to version 17.9.6 or later.
For versions 17.10 through 17.10.3, update to version 17.10.4 or later.