CVE-2025-2045 — Incorrect Authorization in GitLab

CVE-2025-2045

Incorrect Authorization in GitLab PUBLISHED

Description (CNA)

Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data.

Affected (CNA)

Vendor / product	Versions
GitLab / GitLab	affected 17.7.0 before 17.7.6; affected 17.8 before 17.8.4; affected 17.9 before 17.9.1

CWE

CWE-863

References

https://gitlab.com/gitlab-org/gitlab/-/issues/512050
https://hackerone.com/reports/2921111

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.