Security Advisory

CVE-2025-12506

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-08 20:47:28
Last updated 2026-07-09 13:53:34
Assigner GitLab
CVSS score 3.5
State PUBLISHED

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to create a repository where the content displayed in the web interface differed from the content available for download, due to improper handling of Git reference name resolution.