← CVE Intelligence

CVE-2025-0652

Incorrect Authorization in GitLab PUBLISHED

Description (CNA)

An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2 could allow unauthorized users to access confidential information intended for internal use only.

Affected (CNA)

Vendor / productVersions
GitLab / GitLabaffected 16.9 before 17.7.7; affected 17.8 before 17.8.5; affected 17.9 before 17.9.2

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.