CVE-2025-5195
Authorization Bypass Through User-Controlled Key in GitLab
概要
Authorization Bypass Through User-Controlled Key in GitLab
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. It was possible for authenticated users to access arbitrary compliance frameworks, leading to unauthorized data disclosure.
影響パッケージ
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"17.9.0"},{"fixed":"18.0.2"}]}]
参照URL
- report gitlab.com
- web nvd.nist.gov