Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-5819

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances.

Published

2025-08-13T18:15:32.330

Last Modified

2025-08-29T17:15:36.250

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.0 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-732
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application gitlab gitlab < 17.11.6 Yes
Application gitlab gitlab < 17.11.6 Yes
Application gitlab gitlab < 18.0.4 Yes
Application gitlab gitlab < 18.0.4 Yes
Application gitlab gitlab < 18.1.2 Yes
Application gitlab gitlab < 18.1.2 Yes
References