VDB
CVE-2025-11702
CVE-2025-11702
PUBLISHED
GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects.
EPSS 0.01% · 2.3th percentile
Risk Scores
EPSS Score
0.01%
2.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 18.4.0, 18.5.0, 17.1.0 |
| Bitnami | gitlab | 17.1.0, 18.5.0, 18.4.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Oct 22, 2025 CVE Published
- Oct 29, 2025 EPSS Score
- Oct 29, 2025 Coalition ESS Score
- Nov 4, 2025 EPSS Score
- Nov 9, 2025 EPSS Score
- Nov 15, 2025 EPSS Score
- Nov 17, 2025 Coalition ESS Score
- Nov 20, 2025 EPSS Score
- Nov 26, 2025 EPSS Score
- Nov 29, 2025 Coalition ESS Score
- Dec 2, 2025 EPSS Score