CVE-2025-11865 — Vulnetix

Try Vulnetix Request Demo

CVE-2025-11865 PUBLISHED

An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain circumstances, could have allowed an attacker to remove Duo flows of another user.

EPSS 0.02% · 6.0th percentile

Risk Scores

EPSS Score

0.02%

6.0th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	18.1.0, 18.4.0, 18.5.0
Bitnami	gitlab	18.1.0, 18.4.0, 18.5.0

Timeline

Jan 21, 1970 Security Advisory
Nov 13, 2025 CVE Published
Nov 15, 2025 EPSS Score
Nov 15, 2025 Coalition ESS Score
Nov 17, 2025 Coalition ESS Score
Nov 19, 2025 EPSS Score
Nov 24, 2025 EPSS Score
Nov 28, 2025 EPSS Score
Dec 3, 2025 EPSS Score
Dec 3, 2025 Coalition ESS Score
Dec 7, 2025 EPSS Score
Dec 12, 2025 EPSS Score

References

Open in Interactive Console →