← CVE Intelligence

CVE-2025-10282

GitLab Domain Confusion in gitlab Leaks API Key PUBLISHED

Description (CNA)

BBOT's gitlab module could be abused to disclose a GitLab API key to an attacker controlled server with a malicious formatted git URL.

Affected (CNA)

Vendor / productVersions
BLSOPS, LLC / bbotaffected 0.0.0 through 2.6.1

CWE

CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.