CVE-2025-11990 — Vulnetix

Try Vulnetix Request Demo

CVE-2025-11990 PUBLISHED

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.

EPSS 0.02% · 6.4th percentile

Risk Scores

EPSS Score

0.02%

6.4th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	18.4.0, 18.5.0
Bitnami	gitlab	18.4.0, 18.5.0

Timeline

Jan 21, 1970 Security Advisory
Nov 13, 2025 CVE Published
Nov 15, 2025 EPSS Score
Nov 15, 2025 Coalition ESS Score
Nov 16, 2025 Coalition ESS Score
Nov 19, 2025 EPSS Score
Nov 20, 2025 Coalition ESS Score
Nov 24, 2025 EPSS Score
Nov 24, 2025 Coalition ESS Score
Nov 28, 2025 EPSS Score
Dec 3, 2025 EPSS Score
Dec 7, 2025 EPSS Score

References

Open in Interactive Console →