CVE-2025-2045
Incorrect Authorization in GitLab
Résumé
Incorrect Authorization in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data.
Références
- advisory github.com
- advisory nvd.nist.gov
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com