NetSight
low2.2

CVE-2025-12697

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allow…

Impact

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions.

Affected products

VendorProductAffected versions
GitlabGitlab
from 15.5.0 before 18.7.6
from 18.8.0 before 18.8.6
from 18.9.0 before 18.9.2

Weakness classification

References