GitLab
GitLab Security Releases - July 2025
gitlab-2025-07 Jul 1, 2025 Source: Vendor
GitLab security advisories for July 2025: 10 CVEs, 8 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
10 lines
Showing 1–10 of 10
CVE-2025-0765
BR2025-0000-031740
unclaimed
Exposure of Sensitive Information to an Unauthorized Actor issue impacts GitLab CE/EE
Credited as iamgk808
CVE-2025-1299
BR2025-0000-031741
unclaimed
Improper Access Control issue impacts GitLab CE/EE
Credited as pwnie
CVE-2025-3396
BR2025-0000-031742
unclaimed
Improper authorization issue impacts GitLab CE/EE
Credited as theluci
CVE-2025-4439
BR2025-0000-031743
unclaimed
Cross-site scripting issue impacts Kubernetes Proxy in GitLab CE/EE using CDNs
Credited as joaxcar
CVE-2025-4700
BR2025-0000-031744
unclaimed
Cross-site scripting issue impacts Kubernetes Proxy in GitLab CE/EE
Credited as joaxcar
CVE-2025-4972
BR2025-0000-031745
unclaimed
Improper authorization issue impacts GitLab EE
Credited as mateuszek
CVE-2025-4976
BR2025-0000-031746
unclaimed
Improper Access Control issue impacts GitLab EE
Credited as rogerace
CVE-2025-6168
BR2025-0000-031747
unclaimed
Improper authorization issue impacts GitLab EE
Credited as hunter0xp7
CVE-2025-6948
BR2025-0000-031748
unclaimed
Cross-site scripting issue impacts GitLab CE/EE
Credited as yvvdwf
CVE-2025-7001
BR2025-0000-031749
unclaimed
Exposure of Sensitive Information to an Unauthorized Actor issue impacts GitLab CE/EE
Credited as iamgk808