CVE-2025-2615 | GitLab Community Edition/Enterprise Edition up to 18.3.5/18.4.3/18.5.1 Websocket Connection insertion of sensitive information into sent data (Patch 526360)

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 18.3.5/18.4.3/18.5.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Websocket Connection Handler. The manipulation results in insertion of sensitive information into sent data.

This vulnerability is cataloged as CVE-2025-2615. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.