CVE-2025-2045

Incorrect Authorization in GitLab

Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data.

Affected

GitLab

CVSS v3.1 GITLAB

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.28% chance of exploitation in the next 30 days, 19th percentile

Published

2025-03-06

Proof-of-concept exploits (1)

• https://hackerone.com/reports/2921111

Security advisories

• https://gitlab.com/gitlab-org/gitlab/-/issues/512050

References

• CVE Record
• NVD entry