CVE-2025-7000 — Vulnetix

CVE-2025-7000 PUBLISHED

An issue has been discovered in GitLab CE/EE affecting all versions from 17.6 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that, under specific conditions, could have allowed unauthorized users to view confidential branch names by accessing project issues with related merge requests.

EPSS 0.01% · 0.7th percentile

Risk Scores

EPSS Score

0.01%

0.7th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	17.6.0, 18.4.0, 18.5.0
Bitnami	gitlab	17.6.0, 18.4.0, 18.5.0

Exploit Intelligence

https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/ (circl)
GitLab Issue #553129 (circl)
https://hackerone.com/reports/3214025 (bitnami)

Timeline

Nov 13, 2025 CVE Published
Nov 15, 2025 EPSS Score
Nov 15, 2025 CVE Updated
Nov 20, 2025 EPSS Score
Nov 25, 2025 EPSS Score
Nov 30, 2025 EPSS Score
Dec 5, 2025 EPSS Score
Dec 10, 2025 EPSS Score
Dec 15, 2025 EPSS Score
Dec 20, 2025 EPSS Score
Dec 25, 2025 EPSS Score
Dec 30, 2025 EPSS Score

References

Open in Interactive Console →