VDB
CVE-2025-13978
CVE-2025-13978
PUBLISHED
CVSS 4.300000190734863 MEDIUM
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.5 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to discover the names of private projects they do not have access through API requests.
EPSS 0.30% · 21.7th percentile
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.30%
21.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 17.5.0, 18.5.0, 18.6.0 |
| Bitnami | gitlab | 17.5.0, 18.5.0, 18.6.0 |
Timeline
- Dec 10, 2025 CVE Published
- Dec 11, 2025 EPSS Score
- Dec 11, 2025 CVE Updated
- Dec 11, 2025 PoC Published
- Dec 11, 2025 PoC Published
- Dec 16, 2025 EPSS Score
- Dec 21, 2025 EPSS Score
- Dec 25, 2025 EPSS Score
- Dec 30, 2025 EPSS Score
- Jan 4, 2026 EPSS Score
- Jan 9, 2026 EPSS Score
- Jan 14, 2026 EPSS Score