← Back

CVE-2025-1212

nvd nist
Published: Feb 12, 2025Modified: Aug 6, 2025

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

An information disclosure vulnerability in GitLab CE/EE affecting all versions from 8.3 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send a crafted request to a backend server to reveal sensitive information.

Affected (6)

Products: Gitlab: Gitlab
Gitlab
1 product
Gitlab
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Gitlab
Gitlab
From 17.7.0 to 17.7.4
Gitlab
From 17.8.0 to 17.8.2
Gitlab
From 8.3.0 to 17.6.5
Gitlab
From 17.7.0 to 17.7.4
Gitlab
From 17.8.0 to 17.8.2
Gitlab
From 8.3.0 to 17.6.5

Related CWEs

CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

References (1)

Source: cve@gitlab.com
Broken Link

Timeline

No history available yet.