CVE-2025-12697: Improper Encoding or Escaping of Output in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions.
Other sources
GitLab has remediated an issue that could have allowed an authenticated user with maintainer-role permissions to reveal Datadog API credentials under certain conditions.
— GitLab
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-12697?
CVE-2025-12697 is considered a high-severity vulnerability due to its potential to expose sensitive API credentials.
How do I fix CVE-2025-12697?
To fix CVE-2025-12697, upgrade GitLab to versions 18.7.6, 18.8.6, or 18.9.2 as recommended.
Who is affected by CVE-2025-12697?
CVE-2025-12697 affects all GitLab CE/EE versions from 15.5 to before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2.
What could CVE-2025-12697 allow an attacker to do?
CVE-2025-12697 could allow an authenticated user with maintainer-role permissions to reveal Datadog API credentials.
Is there a known exploit for CVE-2025-12697?
As of now, there is no information available indicating a known exploit for CVE-2025-12697.