CVE-2025-1212: Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
An information disclosure vulnerability in GitLab CE/EE affecting all versions from 8.3 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send a crafted request to a backend server to reveal sensitive information.
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-1212?
The severity of CVE-2025-1212 is classified as a medium risk due to the potential information disclosure it introduces.
How do I fix CVE-2025-1212?
To fix CVE-2025-1212, upgrade GitLab CE/EE to versions 17.6.5, 17.7.4, or 17.8.2 or later.
What versions of GitLab are affected by CVE-2025-1212?
CVE-2025-1212 affects GitLab CE/EE versions from 8.3 up to but not including 17.6.5, 17.7 up to but not including 17.7.4, and 17.8 up to but not including 17.8.2.
What type of vulnerability is CVE-2025-1212?
CVE-2025-1212 is an information disclosure vulnerability that allows attackers to reveal sensitive information through crafted requests.
Can CVE-2025-1212 be exploited remotely?
Yes, CVE-2025-1212 can be exploited remotely by sending crafted requests to a vulnerable backend server.