CVE-2025-2045

Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.27% chance of exploitation in the next 30 days, 19th percentile

Published

2025-03-06

Proof-of-concept exploits (1)

• https://hackerone.com/reports/2921111

References

• CVE Record
• NVD entry

Related

• CVE-2025-2044
• CVE-2025-2046
• CVE-2025-2043
• CVE-2025-2047
• CVE-2025-2042
• CVE-2025-2048