Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow users with limited permissions to perform unauthorized actions on critical project data.
2025-02-12T16:15:42.883
2025-08-06T18:49:01.367
Analyzed
CVSSv3.1: 4.3 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | gitlab | gitlab | < 17.7.4 | Yes |
| Application | gitlab | gitlab | < 17.7.4 | Yes |
| Application | gitlab | gitlab | < 17.8.2 | Yes |
| Application | gitlab | gitlab | < 17.8.2 | Yes |