CVEvulnerability

CVE-2025-0362

6.5 MEDIUM Published 2025-04-10 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-04-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses
CWE-1021

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions, an attacker could potentially trick users into unintentionally authorizing sensitive actions on their behalf.

Affected configurations

• gitlab gitlab (>= 7.7.0 < 17.8.7) • gitlab gitlab (>= 17.9.0 < 17.9.6) • gitlab gitlab (>= 17.10.0 < 17.10.4)

Related

Weakness · CWE (1)

  • CWE-1021 Improper Restriction of Rendered UI Layers or Frames weakness

References