BIT-gitlab-2025-0652

vendorUSosv

Incorrect Authorization in GitLab

view advisory published 2025-03-15Licence: per source

An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2 could allow unauthorized users to access confidential information intended for internal use only.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-0652US	medium6.5	0.42% (35th)	—	2025-03-13
An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9…

references

External citations — patches, advisories, analysis.

https://gitlab.com/gitlab-org/gitlab/-/issues/514532WEB
https://hackerone.com/reports/2947863WEB
https://nvd.nist.gov/vuln/detail/CVE-2025-0652WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan