vulnerability

FreeBSD: VID-d45dabd9-5232-11f0-9ca4-2cf05da270f3 (CVE-2025-5315): Gitlab -- Vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:N/I:P/A:N)

Published

Jun 26, 2025

Added

Jun 27, 2025

Modified

Jun 15, 2026

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users with Guest role permissions to add child items to incident work items by sending crafted API requests that bypassed UI-enforced role restrictions.

Solutions

freebsd-upgrade-package-gitlab-cefreebsd-upgrade-package-gitlab-ee

References

CVE-2025-5315
https://attackerkb.com/topics/CVE-2025-5315
CWE-862
EUVD-EUVD-2025-19171
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-19171

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report