未評価
Authorization Bypass Through User-Controlled Key in GitLab
CVE-2025-8770
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
An issue has been discovered in GitLab EE affecting all versions from 18.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that could have allowed authenticated users with specific access to bypass merge request approval policies by manipulating approval rule identifiers.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com