CVE-2025-1198
Insufficient Session Expiration in GitLab
Résumé
Insufficient Session Expiration in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"16.11.0"},{"fixed":"17.8.2"}]}]
Références
- web gitlab.com
- web nvd.nist.gov