cve/2025/CVE-2025-6168.md
2025-09-29 21:09:30 +02:00

828 B

CVE-2025-6168

Description

An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated maintainers to bypass group-level user invitation restrictions by sending crafted API requests.

POC

Reference

No PoCs from references.

Github