VULNERABILITY INTELLIGENCE
CVE-2025-6195
CVSS score4.3 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2025-11-26
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
GitLab has remediated an issue in GitLab EE affecting all versions from 13.7 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an authenticated user to view information from security reports under certain configuration conditions.
Weakness classification
- cve@gitlab.com: CWE-425
Primary references
- cve@gitlab.com
- cve@gitlab.com — Broken Link
- cve@gitlab.com — Permissions Required