CVE-2025-1540
Incorrect Authorization in GitLab
Résumé
Incorrect Authorization in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue has been discovered in GitLab CE/EE for Self-Managed and Dedicated instances affecting all versions from 17.5 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2. It was possible for a user added as an External to read and clone internal projects under certain circumstances."
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"17.5.0"},{"fixed":"17.8.2"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- web about.gitlab.com