PT-2025-9920 · Gitlab · Gitlab Ce/Ee

Weasterhacker · Publicado 2025-03-06 · Atualizado 2025-03-07 · CVE-2025-2045

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.7 through 17.7.5 GitLab EE versions 17.8 through 17.8.3 GitLab EE versions 17.9 through 17.9.0

Description The issue is related to improper authorization, allowing users with limited permissions to access potentially sensitive project analytics data.

Recommendations For GitLab EE versions 17.7 through 17.7.5, update to version 17.7.6 or later. For GitLab EE versions 17.8 through 17.8.3, update to version 17.8.4 or later. For GitLab EE versions 17.9 through 17.9.0, update to version 17.9.1 or later.

Exploit

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2025-2045

Produtos afetados

Gitlab Ce/Ee

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/2xxx/CVE-2025-2045.json · Exploit
• 🔥 https://gitlab.com/gitlab-org/gitlab/-/issues/512050 · Exploit
• 🔥 https://hackerone.com/reports/2921111 · Exploit
• https://osv.dev/vulnerability/CVE-2025-2045 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-2045 · Nota de Segurança
• https://twitter.com/CVEnew/status/1897912303217262630 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1897643735589990755 · Publicação no Twitter