CVE-2025-12575
Description
GitLab has remediated an issue in GitLab EE affecting all versions from 18.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions could have allowed an authenticated user with certain permissions to make unauthorized requests to internal network services through the GitLab server.
Summary dbcve.org
This is a Server-Side Request Forgery (SSRF) vulnerability in GitLab Enterprise Edition. An authenticated user with certain permissions could exploit the GitLab server to make unauthorized requests to internal network services, effectively using the GitLab instance as a pivot point to attack internal infrastructure.
Mitigation
Upgrade GitLab EE to version 18.6.6 or later, 18.7.4 or later, or 18.8.4 or later. Additionally, apply network segmentation to restrict GitLab server access to only necessary internal services.