CVE-2025-6168

Description

An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated maintainers to bypass group-level user invitation restrictions by sending crafted API requests.

References

https://hackerone.com/reports/3196745

https://gitlab.com/gitlab-org/gitlab/-/issues/549725

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS