Non évaluée
Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
CVE-2025-1212
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
An information disclosure vulnerability in GitLab CE/EE affecting all versions from 8.3 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send a crafted request to a backend server to reveal sensitive information.
Références
- advisory github.com
- advisory nvd.nist.gov
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com