CVE-2025-9958 — Insertion of Sensitive Information Into Sent Data in GitLab

CVE-2025-9958

Insertion of Sensitive Information Into Sent Data in GitLab PUBLISHED

Description (CNA)

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that could have allowed Guest users to access sensitive information stored in virtual registry configurations.

Affected (CNA)

Vendor / product	Versions
GitLab / GitLab	affected 14.10 before 18.2.7; affected 18.3 before 18.3.3; affected 18.4 before 18.4.1

CWE

CWE-201

References

https://gitlab.com/gitlab-org/gitlab/-/issues/567777
https://hackerone.com/reports/3323573

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.