PT-2025-32180 · Gatling · Gatling Enterprise

Flo354 · Published 2025-08-06 · Updated 2025-10-09 · CVE-2025-51306

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Gatling Enterprise versions prior to 1.25.0

Description A user logging out of Gatling Enterprise may still be able to use their session token to continue accessing the application without session expiration. This is due to incorrect session management.

Recommendations Update Gatling Enterprise to version 1.25.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-1259

Related Identifiers

CVE-2025-51306

Affected Products

Gatling Enterprise

References · 10

• 🔥 https://github.com/Flo354/vulnerabilities/blob/main/gatling-enterprise/CVE-2025-51306-change-permissions-not-reflected.md · Exploit
• 🔥 https://github.com/Flo354/vulnerabilities/blob/main/gatling-enterprise/CVE-2025-51306-broken-logout.md · Exploit
• 🔥 https://github.com/Flo354/vulnerabilities/tree/main/gatling-enterprise · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-51306 · Security Note
• https://osv.dev/vulnerability/CVE-2025-51306 · Vendor Advisory
• https://t.me/CVEtracker/29362 · Telegram Post
• https://twitter.com/CVEnew/status/1953113727026299017 · Twitter Post
• https://gatling.io/products · Note
• https://twitter.com/VulmonFeeds/status/1953180887018828238 · Twitter Post
• https://t.me/cveNotify/138034 · Telegram Post