← CVE Intelligence

CVE-2025-1299

Missing Authorization in GitLab PUBLISHED

Description (CNA)

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 18.0.5, all versions starting from 18.1 before 18.1.3, all versions starting from 18.2 before 18.2.1 that, under circumstances, could have allowed an unauthorized user to read deployment job logs by sending a crafted request.

Affected (CNA)

Vendor / productVersions
GitLab / GitLabaffected 15.4 before 18.0.5; affected 18.1 before 18.1.3; affected 18.2 before 18.2.1

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.