CVE-2025-2408

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 13.12 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions users could bypass IP access restrictions and view sensitive information.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-1220

Affected software

No affected versions have been published.

Timeline

Published: Apr 10, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-240807.8Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-240817.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-240827.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-240837.8Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-240848.4Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.CVE-2025-2408510.0A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS CVE-2025-240865.5The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, m CVE-2025-240875.5The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protecte CVE-2025-240887.5The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26. An app may be able to override MDM-enforced setti CVE-2025-240895.3A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app may be able to enume CVE-2025-24099.1File corruption vulnerabilities in ASPECT provide attackers access to overwrite sys-tem files if session administrator credentials become co CVE-2025-240903.3A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3. An app may be able to enume