NetSight
medium4.3

CVE-2025-6769

An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed…

Impact

An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance notes by accessing runner details through specific interfaces.

Affected products

VendorProductAffected versions
GitlabGitlab
from 15.1.0 before 18.1.6
from 18.2.0 before 18.2.6
from 18.3.0 before 18.3.2

Weakness classification

References