{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-18T07:54:34.395","vulnerabilities":[{"cve":{"id":"CVE-2025-5819","sourceIdentifier":"cve@gitlab.com","published":"2025-08-13T18:15:32.330","lastModified":"2025-08-29T17:15:36.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances."},{"lang":"es","value":"Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones desde la 15.7 hasta la 17.11.6, la 18.0 hasta la 18.0.4 y la 18.1 hasta la 18.1.2 que podría haber permitido a usuarios autenticados con acceso de desarrollador obtener tokens de identificación para ramas protegidas en determinadas circunstancias."}],"metrics":{"cvssMetricV31":[{"source":"cve@gitlab.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4}]},"weaknesses":[{"source":"cve@gitlab.com","type":"Secondary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","versionStartIncluding":"15.7.0","versionEndExcluding":"17.11.6","matchCriteriaId":"E189D5F9-07AA-4D2B-AE92-B3ED70347DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"15.7.0","versionEndExcluding":"17.11.6","matchCriteriaId":"E288E668-62BD-41DC-B9D9-3FCEC3A1C251"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","versionStartIncluding":"18.0.0","versionEndExcluding":"18.0.4","matchCriteriaId":"A4839A98-785F-41DD-A6A1-51476E823CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"18.0.0","versionEndExcluding":"18.0.4","matchCriteriaId":"4F27FCAE-C2B3-489C-AEDB-BA19DD32DE7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*","versionStartIncluding":"18.1.0","versionEndExcluding":"18.1.2","matchCriteriaId":"BE71AB34-398E-4A9B-A90C-63B1CD883426"},{"vulnerable":true,"criteria":"cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"18.1.0","versionEndExcluding":"18.1.2","matchCriteriaId":"163718AE-806A-4D9C-ADA1-30FBFA87C317"}]}]}],"references":[{"url":"https://gitlab.com/gitlab-org/gitlab/-/issues/548165","source":"cve@gitlab.com","tags":["Broken Link"]},{"url":"https://hackerone.com/reports/3137660","source":"cve@gitlab.com","tags":["Permissions Required"]}]}}]}