Unrated
Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
CVE-2025-1212
First seen on SecPulse
Original description The description as published by the source.
An information disclosure vulnerability in GitLab CE/EE affecting all versions from 8.3 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send a crafted request to a backend server to reveal sensitive information.
References
- advisory github.com
- advisory nvd.nist.gov
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com