Логотип exploitDog
bind:CVE-2025-11990
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-11990

Количество 5

Количество 5

ubuntu логотип

CVE-2025-11990

около 1 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.

CVSS3: 3.1
EPSS: Низкий
nvd логотип

CVE-2025-11990

около 1 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.

CVSS3: 3.1
EPSS: Низкий
debian логотип

CVE-2025-11990

около 1 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 3.1
EPSS: Низкий
github логотип

GHSA-cf8f-2f35-r5wx

около 1 месяца назад

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.

CVSS3: 3.1
EPSS: Низкий
fstec логотип

BDU:2025-14459

около 1 месяца назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с неправильной обработкой данных с кодированием URL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 3.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-11990

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.

CVSS3: 3.1
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2025-11990

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.

CVSS3: 3.1
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2025-11990

GitLab has remediated an issue in GitLab EE affecting all versions fro ...

CVSS3: 3.1
0%
Низкий
около 1 месяца назад
github логотип
GHSA-cf8f-2f35-r5wx

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses.

CVSS3: 3.1
0%
Низкий
около 1 месяца назад
fstec логотип
BDU:2025-14459

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с неправильной обработкой данных с кодированием URL, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 3.1
0%
Низкий
около 1 месяца назад

Уязвимостей на страницу