CVE-2025-0605 — Weak Authentication in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow cer…
Published: 2025-05-22 · CVSS: 4.6 · CVSS 3.1
An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass two-factor authentication requirements.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7