VDB
CVE-2025-10871
CVE-2025-10871
PUBLISHED
CVSS 7.199999809265137 HIGH
An issue has been discovered in GitLab EE affecting all versions from 16.6 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1. Project Maintainers can exploit a vulnerability where they can assign custom roles to users with permissions exceeding their own, effectively granting themselves elevated privileges.
EPSS 0.38% · 29.3th percentile
Risk Scores
CVSS 3.1
7.199999809265137
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.38%
29.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 16.6.0, 18.3.0, 18.4.0 |
| Bitnami | gitlab | 18.3.0, 18.4.0, 16.6.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Sep 25, 2025 CVE Published
- Sep 26, 2025 EPSS Score
- Sep 29, 2025 Coalition ESS Score
- Oct 3, 2025 EPSS Score
- Oct 3, 2025 Coalition ESS Score
- Oct 6, 2025 Coalition ESS Score
- Oct 11, 2025 EPSS Score
- Oct 18, 2025 EPSS Score
- Oct 25, 2025 EPSS Score
- Oct 27, 2025 CVE Updated
- Oct 30, 2025 Coalition ESS Score