Published
2025-09-26
·
Updated
2025-09-26
·
CVE-2025-5069
3.5
Low
| Base vector | Vector | AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N |
**Name of the Vulnerable Software and Affected Versions**
GitLab CE/EE versions 17.10 through 18.2.6
GitLab CE/EE versions 18.3 through 18.3.2
GitLab CE/EE versions 18.4 through 18.4.0
**Description**
An issue exists in GitLab CE/EE that could allow an authenticated user to gain unauthorized access to confidential issues. This is possible by creating a project with an identical name to a victim's project.
**Recommendations**
Update GitLab CE/EE to version 18.2.7 or later.
Update GitLab CE/EE to version 18.3.3 or later.
Update GitLab CE/EE to version 18.4.1 or later.
Exploit
Fix