VDB
CVE-2025-6168
CVE-2025-6168
PUBLISHED
An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated maintainers to bypass group-level user invitation restrictions by sending crafted API requests.
EPSS 0.07% · 20.9th percentile
Risk Scores
EPSS Score
0.07%
20.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 18.0.0 |
| Bitnami | gitlab | 18.0.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Jul 9, 2025 CVE Published
- Jul 10, 2025 EPSS Score
- Jul 10, 2025 CVE Updated
- Jul 19, 2025 EPSS Score
- Jul 29, 2025 EPSS Score
- Aug 7, 2025 EPSS Score
- Aug 17, 2025 EPSS Score
- Aug 26, 2025 EPSS Score
- Sep 4, 2025 EPSS Score
- Sep 14, 2025 EPSS Score
- Sep 23, 2025 EPSS Score