CVE-2025-12073 – Server-Side Request Forgery (SSRF) in GitLab

CVE ID : CVE-2025-12073

Published : Feb. 11, 2026, 11:34 a.m. | 49 minutes ago

Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery against internal services by bypassing protections in the Git repository import functionality.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…