Listen to this Post
CVE-2025-6195 is an information disclosure vulnerability in GitLab Enterprise Edition (EE). It affects all versions from 13.7 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1. The vulnerability allows an authenticated user to view information from security reports under certain configuration conditions. This occurs due to improper access control checks when handling security report visibility. Specifically, under misconfigured project settings or permission models, authenticated users may bypass restrictions intended to limit access to sensitive security data. The security reports can include vulnerability scan results, dependency checks, compliance statuses, and other confidential information. Exploitation requires a valid user account, but even users with minimal privileges might access reports if conditions are met. The issue stems from flaws in the code that validates user permissions against project configurations. When certain security features or visibility settings are incorrectly applied, the system fails to enforce role-based access controls. This allows unauthorized viewing of reports that should be restricted to authorized personnel like maintainers or administrators. The vulnerability is configuration-dependent, meaning not all instances are affected, but those with specific setups are at risk. GitLab remediated this by updating access control logic in the patched versions. The fix ensures thorough permission checks before displaying any security report data. Users must upgrade to EE versions 18.4.5, 18.5.3, 18.6.1 or later to eliminate the vulnerability. Failure to patch could lead to exposure of security postures, aiding attackers in planning further exploits. This CVE highlights the importance of secure configuration and regular updates in DevOps tools.
Platform: GitLab EE
Version: Multiple versions affected
Vulnerability: Information disclosure
Severity: Not specified
Date: 2025-11-26
Prediction: Patched versions released
What Undercode Say:
Analytics:
Check GitLab version
sudo gitlab-rake gitlab:env:info | grep Version
Verify security report access
curl -H “PRIVATE-TOKEN:
Update to patched version
sudo apt update && sudo apt install gitlab-ee
how Exploit:
Authenticated user accesses security dashboard via API or UI under misconfigured conditions.
Protection from this CVE
Upgrade to patched versions: 18.4.5, 18.5.3, 18.6.1.
Impact:
Unauthorized security report viewing, information leakage, attack facilitation.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
