MEDIUM
CVE-2025-13611
CVSS
5.3
Description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.5.5 and 18.6 before 18.6.3 that could have allowed an authenticated user with access to certain logs to obtain sensitive tokens under specific conditions.
Summary dbcve.org
An information disclosure vulnerability in GitLab CE/EE allowed authenticated users with access to certain log files to obtain sensitive tokens that were being logged under specific conditions. The issue affected versions from 13.2 before 18.5.5 and 18.6 before 18.6.3.
Mitigation
Upgrade to GitLab 18.5.5, 18.6.3 or later. Review and restrict access to log files pending the upgrade.
Weakness (CWE)
CWE-532
Sensitive Information in Logs
EPSS Score
0.25%
Probability of exploitation in next 30 days
16.5th percentile
References
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.