← Back

Gatling

gatling

Vendor: Gatling • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-51308
1Gatling
1Gatling
Jun 17, 2026
Aug 6, 2025
N/A· v4
5.3 MEDIUM· v3
N/A· v2
In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing author...Show more
In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing authorization checks.Show less
CVE-2025-51306
1Gatling
1Gatling
Jun 17, 2026
Aug 6, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management.