GitLab
0 remedies
cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*, +2 more
0 remedies
- < 18.1.5
- >= 18.2, < 18.2.5
- >= 18.3, < 18.3.1
GitLab CE/EE Sensitive Variable Exposure Vulnerability via GraphQL API
Vulnerability
A vulnerability exists in GitLab CE/EE in all versions prior to 18.1.5, 18.2 prior to 18.2.5, and 18.3 prior to 18.3.1. This vulnerability could have allowed unauthenticated users to access sensitive manual CI/CD variables by querying the GraphQL API.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive CI/CD variables.
Added: Aug 27, 2025, 8:21 PM
Updated: Aug 27, 2025, 8:21 PM
Vulnerability Rating
Custom Algorithm
spread
7.3impact
2.5exploitability
7.4remediation
0.0relevance
0.4threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.