Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-0194

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. Under certain conditions, access tokens may have been logged when API requests were made in a specific manner.

Published

2025-01-08T20:15:29.193

Last Modified

2025-07-11T20:34:44.203

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Secondary
CWE-538

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	gitlab	gitlab	< 17.5.5	Yes
Application	gitlab	gitlab	< 17.5.5	Yes
Application	gitlab	gitlab	< 17.6.3	Yes
Application	gitlab	gitlab	< 17.6.3	Yes
Application	gitlab	gitlab	< 17.7.1	Yes
Application	gitlab	gitlab	< 17.7.1	Yes

References

https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/#possible-access-token-exposure-in-gitlab-logs Release Notes ([email protected])
https://gitlab.com/gitlab-org/gitlab/-/issues/489459 Exploit, Issue Tracking, Vendor Advisory ([email protected])