CVE-2025-1042 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2…
Medium CVSS: 4.9

CVE-2025-1042

An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to view repositories in an unauthorized way.
Vendor
Gitlab
Product
Gitlab
CWE
CWE-552
Yayın Tarihi
2025-02-12 15:15:16
Güncelleme
2025-08-06 18:48:24
Source Identifier
cve@gitlab.com
KEV Date Added
-

Kategoriler

CWE-552 Gitlab MEDIUM Gitlab 2025

Referanslar

https://gitlab.com/gitlab-org/gitlab/-/issues/50849943 https://hackerone.com/reports/2886976